ProtonMail / ProtonMail/WebClients
vulnerability in WebClients Project
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 5.6k
- Forks
- 715
- PR merge metrics
- No merged PRs in 30d
Description
While working in WebClient Project cross-zip package, I discovered a Directory Traversal vulnerability that allows unauthorized access to sensitive system files. The issue occurs due to improper handling of file paths in the zipSync() and unzipSync() functions, where user-controlled input can lead to reading or writing files outside the intended directory.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the cross-zip package and the zipSync() and unzipSync() functions described in the report. Reproduce the directory traversal with controlled file paths, then verify that paths outside the intended directory cannot be read or written; the CVE links provide the reported vulnerability details.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100