changedetection.io@0.45.21

changedetection.io is a Website change detection and monitoring service

Affected versions of this package are vulnerable to External Control of File Name or Path through the backup restoration. An attacker can access arbitrary local files by supplying a crafted backup archive containing a manipulated history.txt file that references sensitive file paths. This allows the attacker to retrieve the contents of files readable by the application process via the Preview UI or API endpoints.

Upgrade changedetection.io to version 0.55.1 or higher.

changedetection.io is a Website change detection and monitoring service

Affected versions of this package are vulnerable to Incorrect Authorization due to improper decorator ordering in route registration. An attacker can gain unauthorized access to sensitive backup files, exfiltrate confidential configuration data, trigger backup creation or deletion, and potentially inject malicious configurations by sending unauthenticated requests to specific endpoints.

Upgrade changedetection.io to version 0.54.8 or higher.

changedetection.io is a Website change detection and monitoring service

Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the SafeXPath3Parser implementation. An attacker can access sensitive files from the local filesystem by leveraging unblocked XPath 3.0/3.1 functions such as json-doc() and similar file-access primitives.

Upgrade changedetection.io to version 0.54.7 or higher.

changedetection.io is a Website change detection and monitoring service

Affected versions of this package are vulnerable to Information Exposure via the jq and jqraw include filter expressions, which allow access to the env builtin. An attacker can obtain sensitive environment variables by crafting filter expressions that read and store these variables as part of the watch snapshot.

Note: This is only exploitable if authentication is not enabled or if the attacker has valid credentials.

Upgrade changedetection.io to version 0.54.7 or higher.

changedetection.io is a Website change detection and monitoring service

Affected versions of this package are vulnerable to Directory Traversal via the restore_backup function. An attacker can overwrite arbitrary files outside the intended extraction directory by uploading a specially crafted ZIP archive containing path traversal sequences.

Upgrade changedetection.io to version 0.54.4 or higher.

changedetection.io is a Website change detection and monitoring service

Affected versions of this package are vulnerable to Arbitrary Code Injection via the unparsed-text function in XPath expressions processed by the application. An attacker can access and read arbitrary files from the server's filesystem by supplying crafted input to the include_filters field, which is not properly sanitized to block dangerous functions.

Upgrade changedetection.io to version 0.54.4 or higher.

changedetection.io is a Website change detection and monitoring service

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the tag_uuid parameter in the /rss/tag/ endpoint, which is reflected in the HTTP response without proper escaping. An attacker can execute arbitrary JavaScript in the victim's browser by crafting a malicious URL containing a script payload and sending it to a user with an active session.

Note: This is only exploitable if the attacker obtains a valid RSS access token, which can be extracted from the homepage <link> tag without authentication.

Upgrade changedetection.io to version 0.54.4 or higher.

changedetection.io is a Website change detection and monitoring service

Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) via the is_safe_valid_url function. An attacker can access internal network resources and exfiltrate sensitive data by submitting specially crafted watch URLs that resolve to private, loopback, or link-local addresses.

Note: This is only exploitable if no password is configured for the application, which is the default setting.

Upgrade changedetection.io to version 0.54.1 or higher.

changedetection.io is a Website change detection and monitoring service

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the rss/<uuid> endpoint, where the UUID path parameter is reflected in the HTTP response body without proper HTML escaping. An attacker can execute arbitrary JavaScript in the context of the victim's browser by tricking a user into visiting a crafted URL.

Upgrade changedetection.io to version 0.54.1 or higher.

changedetection.io is a Website change detection and monitoring service

Affected versions of this package are vulnerable to Directory Traversal via the send_from_directory function. An attacker can access files within the application package directory by supplying crafted path-traversal sequences in the group parameter of the /static/<group>/<filename> route.

Upgrade changedetection.io to version 0.53.2 or higher.

changedetection.io is a Website change detection and monitoring service

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the validate_url function. An attacker can execute arbitrary JavaScript code in the context of another user by injecting a malicious payload into the URL field and tricking the user into clicking the preview or malicious link.

Upgrade changedetection.io to version 0.50.34 or higher.

changedetection.io is a Website change detection and monitoring service

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via improper handling of errors in filters. An attacker can execute arbitrary code in the context of a user's browser by injecting malicious input into the affected component.

Upgrade changedetection.io to version 0.50.4 or higher.

changedetection.io is a Website change detection and monitoring service

Affected versions of this package are vulnerable to Directory Traversal on URLs received as input. An attacker can read local files via the watch preview functionality. URLs are not sufficiently checked for paths that traverse directories with a "dot-dot" pattern, paths beginning with a space.

Upgrade changedetection.io to version 0.48.5 or higher.

changedetection.io is a Website change detection and monitoring service

Affected versions of this package are vulnerable to Directory Traversal due to improper validation for the file URI scheme. An attacker can read any file on the system by crafting a URL that bypasses the intended restrictions on local file access.

Note: This issue only affects instances with a webdriver enabled, and ALLOW_FILE_URI false or not defined.

Upgrade changedetection.io to version 0.47.6 or higher.

changedetection.io is a Website change detection and monitoring service

Affected versions of this package are vulnerable to Directory Traversal via the Watch.py and __init__.py files, an attacker can read arbitrary files on the system by manipulating the file URL to bypass security checks designed to block traditional file access methods.

Upgrade changedetection.io to version 0.47.5 or higher.