Tina is a headless content management system. Prior to next-tinacms-s3 23.0.4, next-tinacms-dos 23.0.4, next-tinacms-azure 14.0.4, and next-tinacms-cloudinary 26.0.4, the first-party production media…
Medium CVSS 5.4
Summary
Tina is a headless content management system. Prior to next-tinacms-s3 23.0.4, next-tinacms-dos 23.0.4, next-tinacms-azure 14.0.4, and next-tinacms-cloudinary 26.0.4, the first-party production media adapters pass attacker-controlled object keys to storage SDK upload and delete operations without enforcing the operator's configured mediaRoot. In packages/next-tinacms-s3/src/handlers.ts, createMediaHandler accepts req.query.key for a signed PutObject URL and the DELETE path uses req.query.media …
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://github.com/tinacms/tinacms/commit/d44558e9b4502d4f4fc2c970d22985339fe2b6ce
- https://github.com/tinacms/tinacms/pull/7088
- https://github.com/tinacms/tinacms/releases/tag/next-tinacms-s3@23.0.4
- https://github.com/tinacms/tinacms/security/advisories/GHSA-8mq9-5fw2-5rm4
- https://github.com/tinacms/tinacms/security/advisories/GHSA-8mq9-5fw2-5rm4
Timeline
- nvd_ingest NVD