CVE-2026-30958
🟡 Monitoruj
Nieautoryzowany dostęp do plików w OneUptime umożliwia odczyt dowolnych plików z systemu.
CVSS
7.2
EPSS
1.2%
Exploit
poc
Vendor
hackerbay
Opis źródłowy (NVD)
OneUptime is a solution for monitoring and managing online services. Prior to 10.0.21, an unauthenticated path traversal in the /workflow/docs/:componentName endpoint allows reading arbitrary files from the server filesystem. The componentName route parameter is concatenated directly into a file path passed to res.sendFile() in orker/FeatureSet/Workflow/Index.ts with no sanitization or authentication middleware. This vulnerability is fixed in 10.0.21.
exploit path-traversal
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 7.2 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 1.2% |
| Opublikowano (NVD) | 2026-03-10 18:18:54 UTC |
| Ostatnia modyfikacja (NVD) | 2026-10-07 08:10:00 UTC |
Referencje
- https://github.com/OneUptime/oneuptime/releases/tag/10.0.21 ([email protected]) [Product, Release Notes]
- https://github.com/OneUptime/oneuptime/security/advisories/GHSA-p2wh-9pw8-hvff ([email protected]) [Exploit, Mitigation, Vendor Advisory]