opensourcepos Open Source Point of Sale Path Traversal Vulnerability in getPicThumb Function

A path traversal vulnerability has been identified in opensourcepos Open Source Point of Sale versions through 3.4.2. The issue arises in the getPicThumb function within app/Controllers/Items.php, where the pic_filename parameter is not properly sanitized, allowing authenticated attackers to read arbitrary files on the server, including sensitive information like the .env file and encryption keys. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server, such as configuration files and encryption keys.

Remediation

Users are advised to update to the latest version of opensourcepos, where this vulnerability has been patched. The specific commit containing the fix can be found in the official opensourcepos GitHub repository.