CyberRota Analysis
AI-GeneratedThe Appium storage plugin prior to version 1.1.6 is vulnerable to a directory traversal attack, allowing unauthenticated remote clients to exploit the POST /storage/delete endpoint. This flaw enables attackers to escape the designated storage root and recursively delete arbitrary files or directories, posing a significant risk to the integrity of the system. Organizations using affected versions of Appium should prioritize upgrading to version 1.1.6 to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 1.1.6, the Appium storage plugin exposes POST /storage/delete, whose handler passes the user-supplied name value directly into path.join(storageRoot, name) and fs.rimraf() without path sanitization, allowing an unauthenticated remote client to escape the storage root with ../ sequences and recursively delete arbitrary writable files or directories. This issue is fixed in version 1.1.6.