CVE-2018-3724: Path Traversal in general-file-server

Sponsored Habilume Habit tracker with a companion that grows with you Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent. App Store Google Play

Background

The general-file-server is an npm package that provides file server functionality. It allows users to upload, download, and manage files on a server. However, all versions of general-file-server are vulnerable to a path traversal vulnerability.

Vulnerability Detail

The path traversal vulnerability in general-file-server allows an attacker to access files outside of the intended directory. By manipulating the file path in a specific way, an attacker can bypass file access restrictions and retrieve sensitive information or execute arbitrary code. This vulnerability poses a high risk as it can lead to unauthorized access, data leakage, and remote code execution.

Workaround

As there is no official fix, it is advisable to find an alternative package or implement a custom file server solution with proper input validation and file path sanitization to prevent path traversal attacks. Here's an example of how to sanitize file paths in Node.js:

const path = require('path');

function sanitizeFilePath(filePath) {
  const rootPath = '/path/to/root/directory';
  const resolvedPath = path.resolve(rootPath, filePath);

  if (!resolvedPath.startsWith(rootPath)) {
    throw new Error('Invalid file path');
  }

  return resolvedPath;
}

Conclusion

The general-file-server package is vulnerable to a path traversal vulnerability that can lead to unauthorized access, data leakage, and remote code execution. Currently, there is no fix available, so it is recommended to avoid using this module. Consider finding an alternative package or implementing a custom file server solution with proper input validation and file path sanitization. For further support on vulnerability remediation, contact DevNack.com.

See every vulnerability recorded for general-file-server →

FAQ