Directory Traversal Vulnerability in mat2 Package: Risk of Sensitive Data Exposure
Summary
DEBIAN-CVE-2022-35410: mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. Affects mat2 versions < 0.12.1-2+deb11u1. Fixed in 0.12.1-2+deb11u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
mat2, known as the metadata anonymisation toolkit, is a utility designed to remove sensitive metadata from files, particularly useful for privacy-conscious users. It supports various file formats and is commonly used in web applications to ensure that shared files do not inadvertently disclose personal information. However, a vulnerability has been identified that allows for directory traversal during the ZIP archive cleaning process, potentially exposing sensitive information.
Vulnerability Detail
The vulnerability in mat2 arises from improper handling of file paths during the ZIP archive cleaning process, allowing attackers to exploit this flaw through crafted ZIP files. This could lead to unauthorized access to sensitive files outside the intended directory, primarily affecting web instances of mat2. The vulnerability was introduced in versions prior to 0.13.0 and can have serious implications for user privacy and data security.
How To Fix
Minimum fixed version
0.12.1-2+deb11u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade mat2Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid processing ZIP files until they have updated to the patched version of mat2. Additionally, ensure that sensitive files are not included in ZIP archives processed by mat2 until the vulnerability is resolved.
Conclusion
The directory traversal vulnerability in the mat2 package poses a significant risk to user privacy by potentially exposing sensitive information. It is crucial for users to update to the latest patched versions to mitigate this risk. Additionally, utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for mat2 →
FAQ
The vulnerability allows for directory traversal during the ZIP archive cleaning process, potentially exposing sensitive files.
Versions prior to 0.13.0 are affected, with specific fixes available in 0.12.1-2+deb11u1 for Debian 11 and 0.13.0-1 for Debian 12, 13, and 14.
You can use Vulert, which monitors open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
As a workaround, avoid processing ZIP files with mat2 until you can update to the patched version.
Detailed information can be found in the Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-35410.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for mat2.
