taoofagi easegen-admin Pdf2MdUtil.java recognizeMarkdown Pfadüberschreitung

The Path Traversal vulnerability in easegen-admin allows an attacker to manipulate the fileUrl argument within the recognizeMarkdown function, bypassing intended access controls. Successful exploitation enables an attacker to read arbitrary files on the server, potentially exposing sensitive data such as configuration files, source code, or database credentials. The remote nature of the vulnerability means an attacker does not need local access to the system. Given the publicly available exploit, the risk of exploitation is elevated. The blast radius extends to any data accessible by the web server process, depending on its permissions.

1. Reserviert2026-03-16
2. Veröffentlicht2026-03-16
3. Geändert2026-03-17
4. EPSS aktualisiert2026-03-24

While a specific fixed version is not yet available due to the rolling release model, several mitigation strategies can reduce the risk. First, implement strict input validation on the fileUrl parameter to prevent malicious path manipulation. This should include whitelisting allowed characters and validating the file extension. Second, configure the web server to restrict access to sensitive directories and files. Employ a Web Application Firewall (WAF) with rules to detect and block path traversal attempts. Regularly review and update server configurations to minimize the attack surface. Since a direct fix is pending, consider temporarily disabling the recognizeMarkdown functionality if it is not essential.