CyberRota Analysis
AI-GeneratedAuthenticated non-administrative users of LubeLogger prior to version 1.6.8 can exploit a vulnerability in the file upload process to manipulate file paths, potentially allowing unauthorized file placement or overwriting of files outside the designated storage area. This could lead to unauthorized access or modification of sensitive data, posing a significant risk to the integrity of the application. Organizations using affected versions should prioritize upgrading to version 1.6.8 to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, authenticated non-administrative users could reach HandleTranslationFileUpload and influence the name passed from Controllers/FilesController.cs to RenameFile in Helper/FileHelper.cs. RenameFile constructed newFilePath with string replacement and moved the uploaded file without verifying the resolved absolute path remained under the web root or data directory. A crafted upload name could therefore move an uploaded file outside the intended storage directory, enabling unauthorized file placement or overwrite with the privileges of the application process. This issue is fixed in version 1.6.8.