ghsa-rrgf-hcr9-jq6h
Vulnerability from github
Description
A critical path traversal vulnerability (CWE-22) has been identified in the review_paper function in backend/app.py. The vulnerability allows malicious users to access arbitrary PDF files on the server by providing crafted file paths that bypass the intended security restrictions.
Impact
This vulnerability allows attackers to: - Read any PDF file accessible to the server process - Potentially access sensitive documents outside the intended directory - Perform reconnaissance on the server's file system structure
Vulnerable Code
The issue occurs in the review_paper function around line 744:
python
if pdf_path.startswith("/api/files/"):
# Safe path handling for API routes
relative_path = pdf_path[len("/api/files/"):]
generated_base = os.path.join(project_root, "generated")
absolute_pdf_path = os.path.join(generated_base, relative_path)
else:
absolute_pdf_path = pdf_path # VULNERABLE: Direct use of user input
Proof of Concept
bash
curl -X POST http://localhost:5000/api/review \
-H "Content-Type: application/json" \
-d '{"pdf_path": "/etc/passwd"}'
Credit
This vulnerability was discovered and reported by Ruizhe.
{
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "tiny-scientist"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.1.0"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2025-55149"
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"github_reviewed": true,
"github_reviewed_at": "2025-08-11T13:38:14Z",
"nvd_published_at": "2025-08-09T03:15:47Z",
"severity": "MODERATE"
},
"details": "## Description\nA critical path traversal vulnerability (CWE-22) has been identified in the `review_paper` function in `backend/app.py`. The vulnerability allows malicious users to access arbitrary PDF files on the server by providing crafted file paths that bypass the intended security restrictions.\n\n## Impact\nThis vulnerability allows attackers to:\n- Read any PDF file accessible to the server process\n- Potentially access sensitive documents outside the intended directory\n- Perform reconnaissance on the server\u0027s file system structure\n\n## Vulnerable Code\nThe issue occurs in the `review_paper` function around line 744:\n\n```python\nif pdf_path.startswith(\"/api/files/\"):\n # Safe path handling for API routes\n relative_path = pdf_path[len(\"/api/files/\"):]\n generated_base = os.path.join(project_root, \"generated\")\n absolute_pdf_path = os.path.join(generated_base, relative_path)\nelse:\n absolute_pdf_path = pdf_path # VULNERABLE: Direct use of user input\n```\n\n## Proof of Concept\n```bash\ncurl -X POST http://localhost:5000/api/review \\\n -H \"Content-Type: application/json\" \\\n -d \u0027{\"pdf_path\": \"/etc/passwd\"}\u0027\n```\n\n## Credit\nThis vulnerability was discovered and reported by Ruizhe.",
"id": "GHSA-rrgf-hcr9-jq6h",
"modified": "2025-08-11T13:38:14Z",
"published": "2025-08-11T13:38:14Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/ulab-uiuc/tiny-scientist/security/advisories/GHSA-rrgf-hcr9-jq6h"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55149"
},
{
"type": "WEB",
"url": "https://github.com/ulab-uiuc/tiny-scientist/commit/7fd42873603012acb8c55a4fc3eaac9ab18e6559"
},
{
"type": "PACKAGE",
"url": "https://github.com/ulab-uiuc/tiny-scientist"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:U",
"type": "CVSS_V4"
}
],
"summary": "TinyScientist has Path Traversal Vulnerability in PDF Review Function (CWE-22)"
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.