This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis →
Q1What is this vulnerability? (Essence + Consequences)
🚨 **Essence**: A **path traversal** vulnerability in Gopeed when extracting archive files.
📝 **Impact**: An attacker can write to **arbitrary files**, severely compromising **integrity** and **availability** (CVSS I:H/A:…
🔍 **CWE-22**: Path Traversal.
💡 **Flaw**: The extraction logic fails to filter `../` sequences, allowing entry names to escape the extraction directory (extract.go L284-L296).
Q3Who is affected? (Versions/Components)
📦 **Affected**: Gopeed **2.0.0-beta.3** and earlier versions.
🔧 **Components**: The extraction modules in `pkg/download/extract.go` and `extract_7z.go`.
Q4What can hackers do? (Privileges/Data)
👤 **Privileges**: No authentication required (PR:N).
📊 **Data**: System or application files can be overwritten, potentially allowing the injection of malicious code or corruption of configurations.
Q5Is exploitation threshold high? (Auth/Config)
📉 **Barrier**: Low (AC:L).
⚙️ **Configuration**: Requires **“Auto Extract”** to be enabled and a malicious archive to be downloaded to trigger the issue.
Q6Is there a public Exp? (PoC/Wild Exploitation)
🧪 **PoC**: No public PoC available (pocs is empty).
🌍 **Exploitation in the wild**: No recorded in-the-wild exploitation, but the risk is high.
Q7How to self-check? (Features/Scanning)
🔎 **Self-check**: Check if the Gopeed version is ≤ 2.0.0-beta.3.
📋 **Signatures**: Monitor for file write events outside the extraction directory, or scan for `../` sequences in archive entry paths.
Q8Is it fixed officially? (Patch/Mitigation)
✅ **Fixed**: An official patch has been released (commit 38750d85...).
🛡️ **Mitigation**: Upgrade to the fixed version, or temporarily disable the “Auto Extract” feature.
Q9What if no patch? (Workaround)
🛑 **Temporary Workarounds**:
1️⃣ Disable the **AutoExtract** feature.
2️⃣ Before manual extraction, validate the paths of archive entries.
3️⃣ Restrict permissions on the extraction directory to prevent out-of-bounds wri…
⏱️ **Priority**: **High**.
📈 **Rationale**: High CVSS score (I:H/A:H) and low exploitation barrier; it is recommended to **upgrade immediately** or **disable auto-extraction**.