Vulnerability in coaidev CoAI

[ Description ]Official description

CoAI (Chat Nio) through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attackers can supply ../ sequences in hash to download any readable .tar.gz or .zip file, including other users' generated archives.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• github.com/coaidev/coai/blob/v4.0.0/addition/article/api.go
• github.com/coaidev/coai/blob/v4.0.0/addition/generation/api.go
• hackmd.io/@hieuPenguinnn/coai-chatnio-generation-article-download-path-traversal
• www.vulncheck.com/advisories/coai-through-4.0.0-unauthenticated-path-traversal-via-arch…