Critical · published August 19, 2025
🚨 A sneaky path traversal vulnerability in AllSky lets an unauthenticated attacker create a webshell with a single crafted URL! 🔥 Think of this like a delivery driver who doesn’t check the address properly and accidentally drops off sensitive packages in the wrong hands. Just like that misplaced package, this vulnerability allows attackers to access files they shouldn’t, potentially leading to serious consequences. An attacker could not only gain unauthorized access to any files on the server but also execute arbitrary code, which is absolutely devastating! This means they could manipulate your system, steal sensitive information, or even alter your entire setup without you knowing.
Think of this like a delivery driver who doesn’t check the address properly and accidentally drops off sensitive packages in the wrong hands. Just like that misplaced package, this vulnerability allows attackers to access files they shouldn’t, potentially leading to serious consequences. The vulnerability exists in AllSky versions 2023.05.01 to 2024.12.06_06, where improper validation of the path parameter in /includes/save_file.php allows for crafting a request that can lead to remote code execution through path traversal.
An attacker could not only gain unauthorized access to any files on the server but also execute arbitrary code, which is absolutely devastating! This means they could manipulate your system, steal sensitive information, or even alter your entire setup without you knowing. Patch your AllSky installation immediately to a secure version that addresses this vulnerability. Ensure you are on version 2024.12.07 or later, and review your file permissions and server configurations to minimize access risks. This is fixable, and with quick action, you’ll have your system locked down in no time! 🛡️