Jan path traversal vulnerability

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

CVE-2024-36857

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

EUVD-2024-1932

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

CVE-2024-36857

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

CVE-2024-36857: Path Traversal: 'dir\..\..\filename'

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

PT-2024-27182

Name of the Vulnerable Software and Affected Versions Jan version 0.4.12 Description The issue is related to an arbitrary file read vulnerability. This vulnerability can be exploited via the "/v1/app/readFileSync" API endpoint. Recommendations For Jan version 0.4.12, as a temporary workaround,...