ApostropheCMS: Path traversal in uploadfs

影響: npm:uploadfs < 1.28.0 → 1.28.0

The uploadfs library's local storage backend does not validate or sanitize user-supplied paths. The prefixPath() helper only strips double slashes (//) and the backend performs direct string concatenation (uploadsPath + path). An attacker can inject ../ sequences to escape the intended uploads directory, resulting in arbitrary file read, write, and delete on the host filesystem. --- Details Root Cause packages/uploadfs/uploadfs.js:652-655 https://github.com/apostrophecms/apostrophe/blob…

GitHub Advisory Database에서 읽기

2026. 10. 21. 오전 03:21, GitHub Advisory Database에서 "ApostropheCMS: Path traversal in uploadfs"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "낮음"(low)입니다. 관련 기술: JavaScript / Node.js, GitHub. CVE: CVE-2026-113651.