CVE-2026-93571: Path Traversal in Szafir
Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update request to their server can prepare arbitrary XML file that will be saved in location chosen by attacker.
This issue was fixed in version 2.0 build 708.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Szafirto a version that resolves this vulnerability.Fixed in 2.0 build 708
Event History
Frequently Asked Questions
What access or position does an attacker need to exploit this issue?
An attacker must be able to perform a man-in-the-middle attack and reroute the application's update request to an attacker-controlled server. No authentication or user interaction is listed in the supplied severity vector.
What could exploitation allow the attacker to do?
The attacker can provide a crafted XML file with a path-traversal filename and cause it to be saved to a location chosen by the attacker. The provided impact information indicates low integrity impact and no confidentiality or availability impact.
Which versions should be remediated?
The issue was fixed in Szafir version 2.0 build 708. The provided data does not identify the first affected version or whether configurations using updates are enabled by default.