ServiceStack Remote Code Execution Vulnerability via Directory Traversal

A directory traversal vulnerability allowing remote code execution has been identified in ServiceStack versions through 8.6. The issue arises in the FindType method, where user-supplied paths are not properly validated before being used in file operations. This lack of validation creates an opportunity for attackers to execute arbitrary code within the context of the current process.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.

Reproduction

To reproduce this vulnerability, an attacker must interact with the ServiceStack library in a way that triggers the FindType method. This can be done by supplying a crafted path that exploits the directory traversal flaw, bypassing any intended restrictions. Once the path is processed by the FindType method, the attacker can execute arbitrary code on the server.

Remediation

Users are advised to update to ServiceStack version 8.7 or later, where this vulnerability has been addressed.