Code Security Finding: Path/Directory Traversal (CWE-22, High Severity) in UnrestrictedExtensionUploadServlet.java:110

[joshn-whitesource-app]

Code Security Finding

This finding was first detected on 2023-12-06 01:34pm GMT and is still present in the last scan performed on 2024-02-15 10:26pm GMT:

Severity	Vulnerability Type	CWE	File	Data Flows
High	Path/Directory Traversal	CWE-22	UnrestrictedExtensionUploadServlet.java:110	1
Vulnerable Code easybuggy/src/main/java/org/t246osslab/easybuggy/vulnerabilities/UnrestrictedExtensionUploadServlet.java Lines 105 to 110 in b9f2abf // Convert color image into gray scale image. private boolean convert2GrayScale(String fileName) throws IOException { boolean isConverted = false; try { // Convert the file into gray scale image. BufferedImage image = ImageIO.read(new File(fileName)); 1 Data Flow/s detected easybuggy/src/main/java/org/t246osslab/easybuggy/vulnerabilities/UnrestrictedExtensionUploadServlet.java Line 69 in b9f2abf filePart = req.getPart("file"); easybuggy/src/main/java/org/t246osslab/easybuggy/vulnerabilities/UnrestrictedExtensionUploadServlet.java Line 76 in b9f2abf String fileName = MultiPartFileUtils.getFileName(filePart); easybuggy/src/main/java/org/t246osslab/easybuggy/core/utils/MultiPartFileUtils.java Line 56 in b9f2abf public static String getFileName(final Part part) { easybuggy/src/main/java/org/t246osslab/easybuggy/core/utils/MultiPartFileUtils.java Line 57 in b9f2abf for (String content : part.getHeader("content-disposition").split(";")) { easybuggy/src/main/java/org/t246osslab/easybuggy/core/utils/MultiPartFileUtils.java Line 57 in b9f2abf for (String content : part.getHeader("content-disposition").split(";")) { easybuggy/src/main/java/org/t246osslab/easybuggy/core/utils/MultiPartFileUtils.java Line 57 in b9f2abf for (String content : part.getHeader("content-disposition").split(";")) { easybuggy/src/main/java/org/t246osslab/easybuggy/core/utils/MultiPartFileUtils.java Line 57 in b9f2abf for (String content : part.getHeader("content-disposition").split(";")) { easybuggy/src/main/java/org/t246osslab/easybuggy/core/utils/MultiPartFileUtils.java Line 57 in b9f2abf for (String content : part.getHeader("content-disposition").split(";")) { easybuggy/src/main/java/org/t246osslab/easybuggy/core/utils/MultiPartFileUtils.java Line 57 in b9f2abf for (String content : part.getHeader("content-disposition").split(";")) { easybuggy/src/main/java/org/t246osslab/easybuggy/core/utils/MultiPartFileUtils.java Line 57 in b9f2abf for (String content : part.getHeader("content-disposition").split(";")) { easybuggy/src/main/java/org/t246osslab/easybuggy/core/utils/MultiPartFileUtils.java Line 57 in b9f2abf for (String content : part.getHeader("content-disposition").split(";")) { easybuggy/src/main/java/org/t246osslab/easybuggy/core/utils/MultiPartFileUtils.java Line 59 in b9f2abf return content.substring(content.indexOf('=') + 1).trim().replace("\"", ""); easybuggy/src/main/java/org/t246osslab/easybuggy/core/utils/MultiPartFileUtils.java Line 59 in b9f2abf return content.substring(content.indexOf('=') + 1).trim().replace("\"", ""); easybuggy/src/main/java/org/t246osslab/easybuggy/core/utils/MultiPartFileUtils.java Line 59 in b9f2abf return content.substring(content.indexOf('=') + 1).trim().replace("\"", ""); easybuggy/src/main/java/org/t246osslab/easybuggy/core/utils/MultiPartFileUtils.java Line 59 in b9f2abf return content.substring(content.indexOf('=') + 1).trim().replace("\"", ""); easybuggy/src/main/java/org/t246osslab/easybuggy/core/utils/MultiPartFileUtils.java Line 59 in b9f2abf return content.substring(content.indexOf('=') + 1).trim().replace("\"", ""); easybuggy/src/main/java/org/t246osslab/easybuggy/core/utils/MultiPartFileUtils.java Line 59 in b9f2abf return content.substring(content.indexOf('=') + 1).trim().replace("\"", ""); easybuggy/src/main/java/org/t246osslab/easybuggy/core/utils/MultiPartFileUtils.java Line 59 in b9f2abf return content.substring(content.indexOf('=') + 1).trim().replace("\"", ""); easybuggy/src/main/java/org/t246osslab/easybuggy/vulnerabilities/UnrestrictedExtensionUploadServlet.java Line 76 in b9f2abf String fileName = MultiPartFileUtils.getFileName(filePart); easybuggy/src/main/java/org/t246osslab/easybuggy/vulnerabilities/UnrestrictedExtensionUploadServlet.java Line 84 in b9f2abf isConverted = convert2GrayScale(new File(savePath + File.separator + fileName).getAbsolutePath()); easybuggy/src/main/java/org/t246osslab/easybuggy/vulnerabilities/UnrestrictedExtensionUploadServlet.java Line 84 in b9f2abf isConverted = convert2GrayScale(new File(savePath + File.separator + fileName).getAbsolutePath()); easybuggy/src/main/java/org/t246osslab/easybuggy/vulnerabilities/UnrestrictedExtensionUploadServlet.java Line 84 in b9f2abf isConverted = convert2GrayScale(new File(savePath + File.separator + fileName).getAbsolutePath()); easybuggy/src/main/java/org/t246osslab/easybuggy/vulnerabilities/UnrestrictedExtensionUploadServlet.java Line 84 in b9f2abf isConverted = convert2GrayScale(new File(savePath + File.separator + fileName).getAbsolutePath()); easybuggy/src/main/java/org/t246osslab/easybuggy/vulnerabilities/UnrestrictedExtensionUploadServlet.java Line 84 in b9f2abf isConverted = convert2GrayScale(new File(savePath + File.separator + fileName).getAbsolutePath()); easybuggy/src/main/java/org/t246osslab/easybuggy/vulnerabilities/UnrestrictedExtensionUploadServlet.java Line 84 in b9f2abf isConverted = convert2GrayScale(new File(savePath + File.separator + fileName).getAbsolutePath()); easybuggy/src/main/java/org/t246osslab/easybuggy/vulnerabilities/UnrestrictedExtensionUploadServlet.java Line 106 in b9f2abf private boolean convert2GrayScale(String fileName) throws IOException { easybuggy/src/main/java/org/t246osslab/easybuggy/vulnerabilities/UnrestrictedExtensionUploadServlet.java Line 110 in b9f2abf BufferedImage image = ImageIO.read(new File(fileName)); easybuggy/src/main/java/org/t246osslab/easybuggy/vulnerabilities/UnrestrictedExtensionUploadServlet.java Line 110 in b9f2abf BufferedImage image = ImageIO.read(new File(fileName)); easybuggy/src/main/java/org/t246osslab/easybuggy/vulnerabilities/UnrestrictedExtensionUploadServlet.java Line 110 in b9f2abf BufferedImage image = ImageIO.read(new File(fileName)); Secure Code Warrior Training Material ● Training    ▪ Secure Code Warrior Path/Directory Traversal Training ● Videos    ▪ Secure Code Warrior Path/Directory Traversal Video ● Further Reading    ▪ OWASP Path Traversal    ▪ OWASP Input Validation Cheat Sheet 🏴 Suppress Finding ... as False Alarm ... as Acceptable Risk