Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
CERT-Polska/drakvuf-sandbox
master @ 0133d15
3
Fixes
0
CVEs
HIGH
Peak severity
100.0%
Coverage
Highlights
Path Traversal: 2 prior fixes. Scrutinize any change in this area.
drakcore/drakcore/app.py: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Insecure handling of uploaded filenames allows attackers to specify dangerous characters, potentially leading to directory traversal during file processing and storage. Regular expression validation was implemented to enforce strict limits on allowed characters.
Path Traversal: Sample filenames used in task analysis configuration could lead to path traversal or invalid file system states if they contain path-relative sequences. The fix introduced validation using the pathvalidate library to ensure name sanity.
Denial of Service: Allowing users to configure unrestricted analysis timeouts could result in resource exhaustion attacks that keep virtual machines and analysis workers busy indefinitely. A hard threshold limit of 20 minutes was introduced to restrict the drakvuf wait timeout.