Directory Traversal in Bisheng save_download_file

Executive Summary

This vulnerability is a directory traversal issue in the bisheng software versions 2.3.0, 2.4.0, and 2.4.0-beta1. It occurs in the save_download_file function located in src/backend/bisheng/core/cache/utils.py at line 290. Directory traversal allows attackers to access files and directories outside the intended restricted directory.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability is specific to the bisheng application versions 2.3.0, 2.4.0, and 2.4.0-beta1. Detection requires checking if these versions are installed and monitoring for unusual file access patterns or directory traversal attempts in the application logs.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow an attacker to read sensitive files on the server, including configuration files, user data, or system files. It may lead to unauthorized access, data leakage, or further exploitation of the system depending on the files accessed.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA if it results in unauthorized access to personal or protected health information. Organizations may face legal penalties, reputational damage, and loss of trust due to data breaches caused by this issue.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately upgrade bisheng to a version that patches the directory traversal vulnerability in save_download_file. Avoid using versions 2.3.0, 2.4.0, and 2.4.0-beta1.

Useful 0 Not Useful 0