Zipline Resource Allocation Bypass via Forged Content-Range

Executive Summary

Zipline before 4.6.4 has a vulnerability where authenticated users can bypass upload size and quota checks by forging Content-Range headers. Attackers send small data chunks with falsified total sizes and offsets, tricking the server into creating oversized files that consume excessive disk space.

Useful 0 Not Useful 0

Detection Guidance

Monitor disk space usage and check for unusually large files created during chunked uploads. Inspect server logs for requests with forged Content-Range headers or abnormal offset values. Use network traffic analysis tools to detect repeated small uploads with large declared sizes.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to disk exhaustion due to oversized files being created, disrupting service availability. It may also inflate database records and cause denial-of-service conditions by consuming server resources.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade Zipline to version 4.6.4 or later immediately. Implement strict input validation for Content-Range headers and enforce strict size limits on uploads. Monitor disk space and set quotas to prevent excessive consumption.

Useful 0 Not Useful 0