BaseFortify

Executive Summary

This vulnerability exists in the Turms AI-Serving module (v0.10.0-SNAPSHOT and earlier) where the OCR image upload functionality improperly validates file types. Although the system attempts to restrict uploads to image files using the @FormData(contentType = MediaTypeConst.IMAGE) annotation, it only checks client-provided Content-Type headers and file extensions without verifying the actual file content via magic bytes (file signatures). This flaw allows an attacker to upload arbitrary file types such as executables, scripts, HTML, or web shells by spoofing the Content-Type header or using an image file extension, bypassing the intended restrictions. [3]

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to serious security impacts including potential server-side code execution, stored cross-site scripting (XSS), or information disclosure. Since attackers can upload malicious files disguised as images, they may execute unauthorized code on the server or deliver malicious scripts to users, compromising system integrity and confidentiality. [3]

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should implement proper server-side validation of uploaded files by verifying the actual file content using magic bytes (file signatures) instead of relying solely on client-provided Content-Type headers and file extensions. Additionally, restrict or sanitize uploads to prevent arbitrary file types, and consider applying patches or updates if available for the Turms AI-Serving module. [2]

Useful 0 Not Useful 0