Critical · published November 26, 2025
🚨 A sneaky path traversal flaw lets attackers overwrite critical files with a crafted tar archive! 🔥 Think of it like a delivery person who blindly drops off packages at your doorstep without checking the address — if they can just toss anything in, they might end up replacing your prized possessions with junk instead! An attacker could easily replace vital system files like `/etc/shadow` or even your web server's home page, leading to total system compromise. This not only risks sensitive data but could also bring your operations to a grinding halt!
Think of it like a delivery person who blindly drops off packages at your doorstep without checking the address — if they can just toss anything in, they might end up replacing your prized possessions with junk instead! This vulnerability arises from the `restore_mozzi_memories.sh` script that extracts user-controlled tar archives using the `-C /` flag without proper path validation. This allows attackers to exploit the extraction process and overwrite crucial files on the system.
An attacker could easily replace vital system files like `/etc/shadow` or even your web server's home page, leading to total system compromise. This not only risks sensitive data but could also bring your operations to a grinding halt! Immediate action is required: apply a patch to the affected versions and ensure that file uploads validate paths correctly. Additionally, it's crucial to restrict the ability to upload files to trusted sources only. Don't delay on this! You've got this! By staying proactive and implementing these changes, you can secure your system and keep it safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| dbbroadcast/mozart_next_100_firmware | all versions | — |
| dbbroadcast/mozart_next_1000_firmware | all versions | — |
| dbbroadcast/mozart_next_2000_firmware | all versions | — |
| dbbroadcast/mozart_next_30_firmware | all versions | — |
| dbbroadcast/mozart_next_300_firmware | all versions | — |
| dbbroadcast/mozart_next_3000_firmware | all versions | — |
| dbbroadcast/mozart_next_3500_firmware | all versions | — |
| dbbroadcast/mozart_next_50_firmware | all versions | — |
| dbbroadcast/mozart_next_500_firmware | all versions | — |
| dbbroadcast/mozart_next_6000_firmware | all versions | — |
| dbbroadcast/mozart_next_7000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_30_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_50_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_100_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_300_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_500_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_1000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_2000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_3000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_3500_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_6000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_7000_firmware | all versions | — |