पेनडॉक पथ पारगमन (Path Traversal) का उपयोग करके टेम्पलेट्स को अपडेट और डाउनलोड करते समय मनमाना फ़ाइल रीड (Arbitrary File Read) के प्रति संवेदनशील है

An attacker exploiting this vulnerability could gain unauthorized access to sensitive files stored on the system where PwnDoc is running. This could include configuration files, source code, or other confidential data. The ability to read arbitrary files significantly expands the potential attack surface, allowing an attacker to gather information for further exploitation or compromise the system's integrity. While authentication is required, the ease of exploitation once authenticated poses a significant risk, especially in environments where user privileges are not strictly controlled.

Organizations using PwnDoc for penetration testing and report generation are at risk, particularly those with less stringent access controls. Shared hosting environments where multiple users have access to PwnDoc templates are especially vulnerable, as a compromised user account could be used to exploit this vulnerability.

• python: Monitor PwnDoc logs for unusual file access attempts, especially those involving ../ sequences. Use Python's os.path.abspath() function to sanitize file paths before processing them.

import os
filepath = os.path.abspath(user_supplied_path)
if not filepath.startswith(base_directory):
    # Reject the path
    print("Invalid path")

• generic web: Examine web server access logs for requests containing path traversal patterns (e.g., ../../). • generic web: Check for unusual file extensions being uploaded or accessed through PwnDoc's interface.

1. 2024-12-10Disclosure

   disclosure

1. आरक्षित2024-12-09
2. प्रकाशित2024-12-10
3. EPSS अद्यतन2026-04-02

The primary mitigation for CVE-2024-55602 is to upgrade PwnDoc to version 1d4219c596f4f518798492e48386a20c6e9a2fe6, which contains the fix. If upgrading is not immediately possible, restrict access to template update and download functionalities to only trusted users. Implement strict input validation on file extension properties to prevent the injection of path traversal sequences. Consider using a Web Application Firewall (WAF) with rules to detect and block attempts to access files outside of the intended directory. After upgrade, confirm the fix by attempting to upload a template with a path traversal sequence in the file extension and verifying that access is denied.