Path traversal vulnerability in Chameleon Power products

Vulnerability

A path traversal vulnerability exists in Chameleon Power framework version 1.0 in the getImage parameter. This allows a remote attacker to read arbitrary files on the server, including sensitive configuration files [1].

Exploitation

The vulnerability is exploitable over the network without authentication. An attacker can send a crafted request to the vulnerable endpoint, manipulating the getImage parameter with path traversal sequences (e.g., ../) to access files outside the intended directory [1].

Impact

Successful exploitation leads to information disclosure (confidentiality impact). The attacker can obtain sensitive data such as configuration files, potentially revealing credentials or other secrets. There is no impact on integrity or availability.

Mitigation

As of the advisory publication date (November 22, 2023), no official fix or workaround has been made available [1]. Users are advised to monitor for updates from the vendor and restrict network access to the application if possible.