feng_ha_ha MegaGao SSM-ERP and Production_SSM Path Traversal Vulnerability in Picture Deletion Function

A path traversal vulnerability has been identified in the 'production_ssm' system, specifically within the 'pictureDelete' function of 'PictureController.java'. This issue affects versions of the software prior to the commit 4288d53bd35757b27f2d070057aefb2c07bdd097. The vulnerability arises because the system fails to properly sanitize directory traversal characters in file path inputs, allowing remote attackers to manipulate the 'picName' parameter and delete arbitrary files. The vulnerability has been publicly disclosed and is exploitable.

Impact

Exploitation of this vulnerability allows for arbitrary file deletion on the server.

Reproduction

To reproduce this vulnerability, send a POST request to the '/pic/delete' endpoint with a 'picName' parameter that includes directory traversal sequences, such as '..\..\..\123.txt'. The server will interpret the traversal characters, allowing the deletion of files outside the intended directory.