Executive brief
Stimulsoft Dashboard.JS is a JavaScript library used to embed interactive dashboards in web applications. A directory traversal vulnerability in the Save function allows remote attackers to write arbitrary files to the server filesystem by manipulating the fileName parameter, potentially leading to code execution and complete compromise of the application and underlying server.
Technical details
This is a path traversal vulnerability (CWE-22) in Stimulsoft Dashboard.JS versions before 2024.1.3, located in the Save function's fileName parameter handling. An unauthenticated remote attacker can send a crafted payload containing directory traversal sequences (e.g., ../) to bypass path restrictions and write files to arbitrary locations on the server. No authentication or user interaction is required, and the vulnerability is network-accessible. Successful exploitation allows arbitrary file write and execution, leading to remote code execution. The vulnerability was patched in version 2024.1.3.
Affected products
- Stimulsoft Dashboard.JS before 2024.1.3
Timeline
- 2024-02-06: disclosed