CloudBeaver: Path Traversal in updateResultsDataBatch Allows Unauthorized Server File Stream Access

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

CloudBeaver is a cloud database manager. From version 23.2.3 until 26.1.2, a path traversal vulnerability in its SQL result-editing functionality allows an authenticated user with SQL result-editing privileges to cause the server to open files outside the intended temporary upload directory. In affected database value-handling scenarios, this can disclose local files readable by the CloudBeaver server process. Version 26.1.2 prevents traversal outside the intended temporary upload directory.

Etkilenen sürümler1 yazılım

Kaynaklar5 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…beaver/security/advisories/GHSA-8wr4-mh28-m992 Diğer
• github.com/dbeaver/cloudbeaver/pull/4411 Diğer
• github.com/…ommit/caef729a8d227b0446eab6f0ae5f1dc20dced9b5 Diğer

Kayıt geçmişi

1. 6 Kas 2026 23:07Yayımlandı

İlgili açıklar

• 6,5 CVE-2026-63664CloudBeaver: Authorization Bypass (BFLA) - Data Export Restriction Bypass
• 5,3 CVE-2026-55449CloudBeaver: Path Traversal in Resource Manager getProjectPath allows directory enumeration outside shared-projects sandbox
• 5,7 CVE-2026-124029Kopia through 0.23.1 Path Traversal in Snapshot Restore via Directory Entry Names
• 6,5 CVE-2026-108262DDEV incomplete tar symlink traversal fix allows host file overwrite - Incomplete fix of CVE-2026-32885
• 6,3 CVE-2026-75598Gradle Shadow: Zip Slip path traversal in ShadowCopyAction — no independent entry-name sanitization
• 6,5 CVE-2026-119758ERPNext OCR 1.1.1 Path Traversal and SSRF via read_document