diyhi BBS Path Traversal Vulnerability in API Forum Management Action

A critical path traversal vulnerability has been identified in diyhi BBS version 6.8. The issue arises in the API component, specifically within the ForumManageAction.java file. The vulnerability is triggered by manipulating the dirName parameter in the Add function, allowing for arbitrary file path traversal. This flaw can be exploited remotely, with a public proof-of-concept available.

Impact

Exploitation of this vulnerability allows for path traversal, enabling attackers to access files and directories outside the intended directory structure. This could lead to unauthorized file disclosure or manipulation.

Reproduction

To reproduce this vulnerability, send a request to the /control/forum/manage?method=add endpoint with an unvalidated dirName parameter. The lack of proper validation allows for the traversal of directories, potentially accessing sensitive files or directories on the server.