未认证的路径遍历任意文件写入漏洞位于 /api/uploadChunked/public

该漏洞的影响极其严重，攻击者可以利用它在服务器上执行任意代码，窃取敏感数据，甚至完全控制服务器。攻击者可以上传包含恶意脚本的文件，这些脚本将在服务器上执行，从而导致数据泄露、服务中断或进一步的攻击。由于该漏洞无需身份验证，任何外部攻击者都可能利用它，因此其潜在影响范围非常广泛。类似于其他路径遍历漏洞，攻击者可以利用此漏洞访问和修改服务器上的任何文件，包括配置文件、数据库文件和系统文件。

Organizations running self-hosted Fireshare instances, particularly those using older versions (≤ 1.5.3), are at significant risk. Shared hosting environments where Fireshare is installed pose a heightened risk due to the potential for cross-tenant exploitation. Users who have not applied security patches or are unaware of this vulnerability are also at risk.

• linux / server: Monitor system logs (journalctl) for suspicious file creation events in writable directories. Look for patterns related to the /api/uploadChunked/public endpoint and unusual filenames.

journalctl -f | grep '/api/uploadChunked/public' | grep -i 'checkSum'

• generic web: Use curl to test the /api/uploadChunked/public endpoint with crafted checkSum parameters designed to write to arbitrary paths.

curl -X POST -d '...' 'http://your-fireshare-server/api/uploadChunked/public?checkSum=../../../../etc/passwd' -v

• python: If you have access to the Fireshare application code, review the app/server/fireshare/api.py file for the vulnerable upload logic and ensure the fix is correctly implemented.

1. 2026-04-02Disclosure

   disclosure

2. 2026-04-02Patch

   patch

1. 已保留2026-03-30
2. 发布日期2026-04-02
3. EPSS 更新日期2026-04-10

最有效的缓解措施是立即将 Fireshare 升级至 1.5.3 或更高版本。如果无法立即升级，可以考虑以下临时缓解措施：限制服务器文件系统的写入权限，仅允许 Fireshare 进程访问必要的目录；实施 Web 应用防火墙 (WAF) 规则，以阻止对 /api/uploadChunked/public 端点的恶意请求；监控服务器日志，查找可疑的文件上传活动。升级后，请验证文件上传功能是否正常工作，并确认漏洞已成功修复。