CyberRota Analysis
AI-GeneratedA critical path traversal vulnerability in pulpcore allows authenticated administrators to exploit the relative_path_validator function, which inadequately checks for directory traversal sequences like "../". This oversight enables attackers to write arbitrary files to any location accessible by the Pulp service user, potentially compromising the service and leading to broader system exploitation. Organizations using pulpcore should prioritize addressing this vulnerability to safeguard their systems against potential attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An authenticated administrator can craft a relative_path containing embedded traversal sequences (e.g., "looking/normal/../../../../etc/shadow") that escapes the intended export directory during FilesystemExport operations. Because the file content is also user-controlled (uploaded artifact), this allows arbitrary file write to any location writable by the Pulp service user, potentially leading to service compromise or further system exploitation.