JoeyBling Bootplus Path Traversal Vulnerability in SysFileController

A path traversal vulnerability has been identified in JoeyBling Bootplus versions up to commit 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. The issue arises in the file 'src/main/java/io/github/controller/SysFileController.java', where the download method fails to properly validate the 'name' parameter. This lack of input sanitization allows for the manipulation of file paths, enabling remote attackers to download arbitrary files from the server.

Impact

Exploitation of this vulnerability allows for unauthorized file downloads, potentially leading to the exposure of sensitive information.

Reproduction

To reproduce this vulnerability, send a request to the '/file/download' endpoint with a crafted 'name' parameter that includes an absolute file path. The 'real' parameter should be set to '1'. The server will respond by downloading the specified file, bypassing any intended restrictions.