Raphael Vinot

Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlled file paths could be used without ensuring that the resulting destination remained within the intended extraction directory. An attacker able to submit a malicious file for analysis could use path traversal sequences or crafted paths to cause extracted content to be written outside the designated extraction directory, potentially overwriting files accessible to the Pandora worker process. Successful exploitation could result in unauthorized modification of application or system files, denial of service, and potentially further compromise depending on the permissions of the Pandora process and the files that can be overwritten. The vulnerability is addressed by resolving each extraction destination path before writing and verifying that it remains below the expected extraction directory. Extraction attempts resolving outside this directory are rejected and reported as path traversal attempts.

PlaywrightCapture contains a server-side request forgery (SSRF) vulnerability in its favicon retrieval functionality. When only global lookup is enabled, the application validates the initial favicon URL to prevent requests to localhost, loopback, or other non-public network addresses. However, redirects followed by aiohttp were not subjected to the same validation. An attacker able to influence the content of a page processed by PlaywrightCapture could specify a publicly reachable favicon URL that responds with an HTTP redirect to a local or otherwise restricted address, such as 127.0.0.1, localhost, or an internal network service. Because aiohttp automatically followed the redirect, the resulting request could bypass the application's local-address restrictions and cause the PlaywrightCapture host to issue HTTP requests to resources that should not be externally reachable. Depending on the services reachable from the PlaywrightCapture host and how retrieved favicon data is subsequently exposed or processed, this could be used to probe internal HTTP services or potentially obtain information from otherwise inaccessible endpoints. The patch introduces an aiohttp request middleware that applies the existing local-URL validation to every request in the redirect chain. Requests resolving to restricted/local destinations are rejected before they are issued.

**Name of the Vulnerable Software and Affected Versions** Pandora (affected versions not specified) **Description** A stored cross-site scripting issue exists in the PDF download functionality. The endpoint '/task-download/<task id>/.../pdf' uses content-based detection to verify files as PDFs but fails to explicitly specify the MIME type or force the file to be downloaded as an attachment when using the `send file()` function. An attacker can upload a polyglot file—a file that is valid in two different formats—which Pandora recognizes as a PDF, but whose filename triggers the server to return a different active MIME type. This allows the browser to interpret the file as HTML or another executable web format, executing attacker-controlled scripts within the application's security context and potentially compromising the victim's session data. **Recommendations** Update the software to the patched version that explicitly returns PDF downloads with Content-Type: application/pdf, forces Content-Disposition: attachment, and assigns a trusted .pdf filename based on the task UUID.

**Name of the Vulnerable Software and Affected Versions** Pandora (affected versions not specified) **Description** Stored cross-site scripting (XSS) occurs during the rendering of URL observables. A URL associated with an analyzed file is inserted directly into the inline JavaScript onclick handler of the Submit to Lookyloo action. Because the value is embedded within a JavaScript string inside an HTML attribute, an attacker can use specially crafted characters to break the string and inject arbitrary JavaScript code. This script executes in the context of the web application when a user interacts with the Submit to Lookyloo control, potentially allowing the attacker to access browser information or perform actions using the victim's authenticated session. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Pandora (affected versions not specified) **Description** Pandora contains a denial-of-service issue in its handling of DAA (Direct Access Archive) files. During the extraction of an internal ISO image from a DAA archive, the system uses the `zlib.decompress()` function to process compressed chunks without enforcing a limit on the resulting uncompressed data. An attacker can submit a crafted DAA file containing highly compressed data, causing the system to expand a small input into an excessively large amount of data in memory. This process can lead to extreme memory consumption and CPU exhaustion, which may cause the extraction worker to become unresponsive or terminate, impacting the overall availability of the service. This type of attack is known as a decompression bomb, where a small file is designed to consume vast amounts of system resources upon decompression. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Pandora (affected versions not specified) **Description** Pandora contains a path traversal issue in its TAR archive extraction functionality. The extractor passes archive member names directly to the `tarfile.TarFile.extract()` function without applying an extraction filter. An attacker can submit a specially crafted TAR archive containing malicious member paths, such as absolute paths or sequences using `../`, to write files outside the intended extraction directory. This can lead to the overwriting of files accessible to the Pandora worker process, potentially resulting in arbitrary code execution, application compromise, or denial of service. **Recommendations** Apply the Python `filter='data'` extraction filter to reject or sanitize dangerous TAR members, including unsafe link targets and paths that escape the destination directory.

**Name of the Vulnerable Software and Affected Versions** Lookyloo PlaywrightCapture (affected versions not specified) **Description** A Server-Side Request Forgery (SSRF) issue occurs when the `only global lookup` option is enabled. While this option is intended to block access to local, loopback, or non-public network resources, the favicon retrieval process bypasses these protections. Favicon URLs extracted from HTML are fetched directly using an `aiohttp.ClientSession` without proper validation. An attacker controlling a processed web page can use a crafted favicon reference to force the host to make HTTP requests to internal network services, private IP addresses, or loopback addresses. This can lead to internal service discovery or unauthorized interaction with internal HTTP endpoints. **Recommendations** Apply the patch that introduces a common URL validation routine to favicon retrieval to reject non-global IP addresses, localhost, .local domains, and malformed URLs.

**Name of the Vulnerable Software and Affected Versions** Lookyloo (affected versions not specified) **Description** Lookyloo fails to enforce limits on the decompressed size of uploaded capture archives and compressed HAR files. An attacker can submit a specially crafted ZIP, gzip, or zlib-compressed capture containing data that expands to an excessive size during processing. Since the application decompresses this content directly in memory without limiting the output size, it can lead to memory exhaustion, termination of web or worker processes, or complete instance unavailability. This issue affects full capture archive imports and API submissions containing gzip-compressed HAR data. Repeated exploitation may result in a persistent denial-of-service condition, which is a state where a service is unavailable to its intended users, until the affected processes or instance are restarted. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** A stored cross-site scripting issue exists on the capture tree visualization page. The application embeds serialized capture tree data directly into an inline JavaScript block using the Jinja safe filter. Since this data can include attacker-controlled web content, a crafted value can terminate the `<script>` element and inject arbitrary HTML or JavaScript. This allows the execution of malicious code in the browser of a user viewing the capture tree, potentially enabling the attacker to perform actions via the victim's authenticated session, access sensitive information, or modify application data. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PlaywrightCapture (affected versions not specified) **Description** PlaywrightCapture stored configuration and runtime data as mutable class-level variables instead of instance-level variables. This allows multiple Capture objects within the same Python process to share state, including HTTP headers, cookies, browser storage, HTTP credentials, proxy configuration, user-agent settings, geolocation information, and captured request data. In concurrent or multi-user deployments, data from one capture can persist and be reused by others, potentially leading to the disclosure of authentication cookies, credentials, or browser storage. This may also allow requests to be executed using another capture's authentication context or proxy configuration, enabling unauthorized access to remote resources. **Recommendations** Initialize all capture-specific settings and request data as instance variables in the Capture constructor to ensure state isolation between operations.