A critical file upload vulnerability in the zdh_web platform allows authenticated attackers to achieve remote code execution or privilege escalation by writing arbitrary files to the server.

The application fails to properly sanitize file upload paths, which permits an authenticated user to perform path traversal and overwrite critical system files. This flaw can be leveraged to achieve remote code execution or elevate privileges on the underlying host.

Successful exploitation of this vulnerability poses a severe risk to organizational infrastructure. By gaining the ability to write arbitrary files, an attacker can compromise the integrity and availability of the server, potentially leading to a full system takeover. With a CVSS score of 8.8, this vulnerability is classified as High, reflecting the significant potential for lateral movement and data theft within the affected environment.

Immediate Action: Currently, no official patch version is documented; administrators should restrict access to the file upload functionality and monitor the vendor GitHub repository for a release addressing the issue identified in pull request 39.

Proactive Monitoring: Security teams should monitor server logs for suspicious file creation events, particularly those targeting sensitive system directories or configuration files.

Compensating Controls: Implement strict file type validation and path filtering at the Web Application Firewall level to block unauthorized file upload attempts that attempt to traverse outside the designated upload directory.

Public Exploit Available: Unknown

Given the severity of this vulnerability, organizations using zdh_web must treat this as a high priority item. Until a formal patch is released, administrators should enforce the principle of least privilege for all user accounts capable of uploading files and perform regular audits of the server filesystem to detect unauthorized changes.