Syspass Special Character Filename Handling Vulnerability Leading to Source Code Disclosure

A vulnerability exists in Syspass versions 3.2.x within the account file upload feature, where special characters in filenames are not properly managed. This oversight allows for the unintentional disclosure of the web application's source code, revealing sensitive information such as the database password.

Impact

Exploitation of this vulnerability results in the unauthorized disclosure of the web application's source code, including sensitive information like the database password.