Path traversal fix in file_transfer.go with symlink escape PoC

Vulnerability Key Information Summary Vulnerability Overview Vulnerability ID: DEV-3084 Vulnerability Type: Path Traversal Affected Functionality: File download/upload functionality Description: A path traversal vulnerability exists in the file download/upload functionality. Attackers can access or write files in unintended locations by crafting special paths (e.g., ). Scope of Impact Affected Files: - (Core fix file) - (New test file) - (CI configuration update) - (CI configuration update) Affected Versions: branch (v1.26.35 → v1.26.25) Commit Info: Commit , Author , Verification: Passed (Verified) Remediation Plan 1. Core Fix ( ): - In the function, sanitize and validate the target path to prevent path traversal. - Use to clean the path and verify that the cleaned path remains within the expected directory. - Apply special handling for symbolic links (symlinks) to prevent bypassing path checks via symlinks. - Before creating a file, check if the target path already exists; if it does, return an error to avoid overwriting. 2. Test Coverage ( ): - Added a new test function , specifically testing path traversal protection in symlink scenarios. - Test cases include: - Self-referential symlink ( ) - Traversal symlink ( ) - Regular file ( with content ) - Verifies that correctly rejects cases where a symlink points outside . 3. CI Configuration Updates: - Updated Go version and dependency versions in and to ensure the CI environment is compatible with the fixed code. POC / Exploit Code

Goal Reached Thanks to every supporter — we hit 100%!

Path traversal fix in file_transfer.go with symlink escape PoC

More from this source