EverSync Arbitrary File Download Vulnerability

An arbitrary file download vulnerability has been identified in EverSync version 0.5. This vulnerability allows unauthenticated attackers to access sensitive files by directly requesting them from the application's files directory. Exploitation involves sending GET requests to download database files, such as 'db.sq3', which may contain application data and credentials.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive application data and credentials stored in the database file.

Reproduction

To reproduce this vulnerability, send a GET request to the files directory of the EverSync application. Include the 'db.sq3' file in the request. The server response should include the requested database file, indicating successful exploitation.