Pfadübersprung in Reposilite Javadoc-Datei-Erweiterung (beliebige Datei-Erstellung/Überschreibung) (`GHSL-2024-073`)

The Arbitrary File Upload vulnerability allows an attacker to upload malicious files to the Reposilite server. This could include web shells, backdoors, or other executable code. Successful exploitation could lead to complete server compromise, allowing the attacker to read, modify, or delete sensitive data, execute arbitrary commands, and potentially pivot to other systems on the network. The ability to upload arbitrary files bypasses standard security controls and significantly expands the attack surface. The impact is amplified if Reposilite is deployed in a critical infrastructure environment or handles sensitive data.

Organizations utilizing Reposilite Backend for managing software repositories are at risk, particularly those running version 3.5.10. Environments where Reposilite is exposed to untrusted networks or where JavaDoc archives are sourced from external, unverified sources are at higher risk. Shared hosting environments using Reposilite are also vulnerable, as a compromised account could potentially exploit this vulnerability.

• linux / server:

journalctl -u reposilite -g "JavadocEndpoints.kt"

• generic web:

curl -I http://your-reposilite-server/javadocs/path/to/malicious/file.php

• generic web:

grep -r 'JavadocEndpoints.kt' /var/log/apache2/access.log

1. 2024-08-02Disclosure

   disclosure

1. Reserviert2024-05-20
2. Veröffentlicht2024-08-02
3. Geändert2024-11-04
4. EPSS aktualisiert2026-04-02

The primary mitigation for CVE-2024-36116 is to immediately upgrade Reposilite Backend to version 3.5.12 or later. If upgrading is not immediately feasible, consider implementing temporary workarounds. Restrict file upload permissions and carefully validate all uploaded files. Implement strict input validation on the Javadoc archive expansion functionality to prevent path traversal attempts. Employ a Web Application Firewall (WAF) with rules to block suspicious file upload requests and patterns. Regularly scan the Reposilite installation for unauthorized files.