Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-repository operations. An authenticated remote attacker with read-only access to a file could present a download transfer to the upload endpoint, obtain a signed upload URL for an attacker-selected object key, and append a chunk to the owner's file. Exploitation could upload or overwrite repository objects and consume storage, subject to transfer size, chunk-count, and lifetime limits.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
None
No data leak
Integrity
Low
Partial data modification
Availability
Low
Partial disruption
CVSS Vector v3.1
Weakness Type (CWE)
Vulnerable Products
esaqa gmbh:psono
References 5
https://gitlab.com/esaqa/esaqa/security-advisories/-/blob/master/advisories/CVE…
fdf66990-8419-4c8c-8848-ec15d75773b4
https://gitlab.com/esaqa/psono/psono-server
fdf66990-8419-4c8c-8848-ec15d75773b4
https://gitlab.com/esaqa/psono/psono-server/-/blob/v7.2.3/psono/restapi/seriali…
fdf66990-8419-4c8c-8848-ec15d75773b4
https://gitlab.com/esaqa/psono/psono-server/-/commit/64753b19bd8d03cfbed20db575…
fdf66990-8419-4c8c-8848-ec15d75773b4
https://gitlab.com/esaqa/psono/psono-server/-/releases/v7.2.4
fdf66990-8419-4c8c-8848-ec15d75773b4