Path Traversal in cast-localvideo

Executive Summary

This is a path traversal vulnerability in the cast-localvideo tool. It allows an unauthenticated remote attacker to read arbitrary files from the server by exploiting unsanitized user input in the req.body.dir parameter. The app.js handler passes this parameter directly to res.sendFile(), enabling directory traversal via absolute paths or ../ sequences to access sensitive system files.

Useful 0 Not Useful 0

Detection Guidance

Check if the application is running and inspect network traffic for requests containing the 'dir' parameter in POST requests to the vulnerable endpoint. Look for unusual file reads or errors indicating path traversal attempts.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to read sensitive files on the server, including configuration files, user data, or system files. This could lead to unauthorized access to confidential information, potential data breaches, or further attacks on the system.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations using this tool may face compliance violations, legal penalties, and reputational damage.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately stop using the mustafaakin/cast-localvideo application. Apply input validation to sanitize the 'dir' parameter before passing it to res.sendFile(). Ensure the application is updated if a patch is released.

Useful 0 Not Useful 0