Wandb OpenUI Unauthenticated File Upload Vulnerability Allowing S3 Bucket Abuse

A vulnerability in wandb/openui, specifically in the latest commit, allows unauthenticated users to upload and download files from an AWS S3 bucket via the '/v1/share/{id:str}' endpoint. This lack of authentication could lead to various security issues, including denial of service, stored cross-site scripting, and information disclosure. The vulnerability arises because any user can upload and overwrite files, potentially filling up the S3 bucket's storage, injecting harmful scripts, or accessing sensitive data.

Impact

Exploitation of this vulnerability could result in denial of service by exhausting S3 bucket storage, stored cross-site scripting through the injection of malicious scripts, and unauthorized access to sensitive information.