CVE-2022-35410: Directory Traversal Vulnerability in mat2
Summary
CVE-2022-35410: mat2 before 0.13.0 allows directory traversal during the ZIP archive cleaning process. Affects mat2 versions < 0.13.0. Fixed in 0.13.0. How to fix ↓
Also tracked for
- mat2 · Debian:11
The same CVE-2022-35410 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
mat2 is a metadata anonymization toolkit that allows users to remove metadata from files, such as images, documents, and audio files. It is primarily used to protect sensitive information and maintain privacy. However, versions of mat2 prior to 0.13.0 are vulnerable to a directory traversal attack during the ZIP archive cleaning process. This vulnerability can be exploited by malicious actors to access sensitive information by crafting a malicious archive.
Vulnerability Detail
The directory traversal vulnerability in mat2 allows an attacker to bypass the intended restrictions and navigate to directories outside the intended scope. By including '../' sequences in the file paths within a ZIP archive, an attacker can traverse the file system and access files or directories that should be restricted. This can lead to unauthorized disclosure of sensitive information stored on the server hosting mat2 web instances. The vulnerability has a moderate severity rating and is classified under CWE-22.
How To Fix
Minimum fixed version
0.13.0
This is the first release that contains the fix.
pip install --upgrade "mat2==0.13.0"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If updating to the latest version is not immediately feasible, a temporary workaround can be implemented by disabling the ZIP archive cleaning feature in mat2. This can be done by modifying the configuration file or disabling the feature in the web interface. However, it is strongly advised to update to the latest version as soon as possible to ensure comprehensive security.
Conclusion
The directory traversal vulnerability in mat2 can be mitigated by updating to version 0.13.0 or later. It is important to promptly apply the update to ensure the security of mat2 web instances. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for mat2 →
FAQ
mat2 is a metadata anonymization toolkit used to remove metadata from files.
The vulnerability allows attackers to access sensitive information stored on the server hosting mat2 web instances.
Update mat2 to version 0.13.0 or later.
Yes, you can disable the feature in the configuration file or web interface.
Yes, the vulnerability has a moderate severity rating.
Related vulnerabilities
Recent vulnerabilities recorded for mat2.
