Fast Tunnel
Monthly
Authenticated attackers can abuse the plugin installer in arizu-id Fast Tunnel 1.0.0 to upload arbitrary files because the plugin_file argument is passed to ZipArchive::extractTo without adequate validation. Successful exploitation can write PHP payloads or Zip-Slip paths into web-accessible locations, with integrity impact assessed as High and confidentiality/availability impact as Low; publicly available exploit code exists, but no CISA KEV confirmation is available. The issue is fixed in version 1.0.1.
Authenticated attackers can abuse the plugin installer in arizu-id Fast Tunnel 1.0.0 to upload arbitrary files because the plugin_file argument is passed to ZipArchive::extractTo without adequate validation. Successful exploitation can write PHP payloads or Zip-Slip paths into web-accessible locations, with integrity impact assessed as High and confidentiality/availability impact as Low; publicly available exploit code exists, but no CISA KEV confirmation is available. The issue is fixed in version 1.0.1.