Tina is a headless content management system. Prior to version 2.2.2, @tinacms/cli recently added lexical path-traversal checks to the dev media routes, but the implementation still validates only the path string and does not resolve symlink or junction targets. If a link already exists under the media root, Tina accepts a path like pivot/written-from-media.txt as "inside" the media directory and then performs real filesystem operations through that link target. This allows out-of-root media listing and write access, and the same root cause also affects delete. This issue has been patched in version 2.2.2.
Tina CMS versions prior to 2.2.2 contain a path traversal vulnerability in media route handling that fails to resolve symlinks and junctions, allowing attackers to read, write, and delete files outside the intended media directory. The vulnerability bypasses path validation checks by exploiting symbolic links already present under the media root.
تحتوي نسخ Tina CMS السابقة للإصدار 2.2.2 على ثغرة اجتياز مسار في معالجة مسارات الوسائط حيث تفشل في حل الروابط الرمزية والوصلات. يسمح هذا للمهاجمين بقراءة وكتابة وحذف الملفات خارج مجلد الوسائط المقصود من خلال استغلال الروابط الموجودة بالفعل تحت جذر الوسائط.
Tina CMS versions prior to 2.2.2 contain a path traversal vulnerability in media route handling that fails to resolve symlinks and junctions, allowing attackers to read, write, and delete files outside the intended media directory. The vulnerability bypasses path validation checks by exploiting symbolic links already present under the media root.
Upgrade Tina CMS to version 2.2.2 or later immediately. Implement strict file system permissions on media directories and disable symlink/junction creation in media roots. Review and audit all media directory access logs for unauthorized file operations.
قم بترقية Tina CMS إلى الإصدار 2.2.2 أو أحدث فوراً. طبق أذونات نظام الملفات الصارمة على مجلدات الوسائط وعطل إنشاء الروابط الرمزية في جذور الوسائط. راجع وتدقيق جميع سجلات الوصول إلى مجلد الوسائط للعمليات غير المصرح بها.