Path Traversal in Flowintel

Executive Summary

This vulnerability allows an attacker to modify the LOG_FILE configuration value through system settings without restricting it to a filename in the intended log directory. This enables writing controlled data into unintended files, potentially leading to arbitrary code execution via template injection and application rendering behavior.

Useful 0 Not Useful 0

Detection Guidance

Check for unauthorized modifications to the LOG_FILE configuration in Flowintel settings. Review log files for unexpected content or file writes outside the intended directory. Look for suspicious template injections in logs that could indicate exploitation attempts.

Useful 0 Not Useful 0

Impact Analysis

An attacker with admin privileges could exploit this to inject malicious templates into arbitrary files, which may then be executed by the application. This could lead to unauthorized code execution, data theft, or system compromise depending on the application's context and permissions.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized file writes and potential remote code execution, which may result in data breaches or unauthorized access to sensitive information. For GDPR, this could violate principles of data integrity and confidentiality, leading to regulatory penalties. For HIPAA, it risks exposing protected health information, violating security requirements for safeguarding electronic protected health information.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade Flowintel to a patched version that removes LOG_FILE from editable settings and implements path validation. Restrict admin privileges to prevent unauthorized configuration changes. Monitor logs for unusual file writes or template injections.

Useful 0 Not Useful 0