Listen to this Post
How the CVE Works
The vulnerability arises during the import of a Simple Archive Format (SAF) package in DSpace. An attacker crafts a malicious SAF archive where the `contents` file contains relative path sequences (e.g., ../../etc/passwd). When an administrator imports this archive via the command-line (./dspace import) or the “Batch Import (Zip)” UI feature, the system reads and exposes sensitive files accessible by the Tomcat user. This leads to arbitrary file disclosure, including server configurations or credentials. Exploitation requires admin privileges, either directly or through social engineering.
DailyCVE Form
Platform: DSpace
Version: 1.x <= 7.6.3, 8.0 <= 8.1, 9.0
Vulnerability: Path Traversal
Severity: Critical
Date: 2023-XX-XX
Prediction: Patch expected in 7.6.4, 8.2, 9.1
What Undercode Say
Analytics:
– `./dspace import –add –source=[bash]`
– `git apply CVE-2023-XXXX.patch`
– `mvn -U clean package`
– `ant update`
How Exploit
1. Craft SAF with malicious `contents` file.
2. Convince/admin-trigger import.
3. Exfiltrate `/etc/passwd` or configs.
Protection from this CVE
- Upgrade to 7.6.4/8.2/9.1.
- Apply manual patch.
- Audit SAF imports.
Impact
- Arbitrary file read.
- Credential leakage.
- Server compromise.
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
