Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security Vulnerability #2

Closed
LongWayHomie opened this issue Dec 23, 2021 · 1 comment
Closed

Security Vulnerability #2

LongWayHomie opened this issue Dec 23, 2021 · 1 comment

Comments

@LongWayHomie
Copy link

Hello,

I'm trying to reach you regarding security vulnerability I have found in your application.
Can you add a SECURITY.md file with an e-mail to your repository, so that our system can send you the vulnerability details? GitHub suggests that a security policy is the best way to make sure security issues are responsibly disclosed.

Once you've done that, you should receive an e-mail within the next hour with more info.

Thanks!

@LongWayHomie
Copy link
Author

Since the author is not responding (since 23.12.2021), vulnerability is being disclosed publicly.
The OAS application does not filter the uploaded content, which enables attacker to upload malicious PHP file via documents.php and obtain code execution. Since the application does not require to authenticate, it's easy to exploit this vulnerability.
I have created exploit for that: https://www.exploit-db.com/exploits/50623

Regards,
Jeremiasz Pluta

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant