Windmill/Nextcloud Flow < 1.603.3 - Unauthenticated Path Traversal Detection

Windmill 1.603.3 contains a path traversal caused by unsanitized filename parameter in getlogfile endpoint, letting unauthenticated attackers read arbitrary files on the server, exploit requires no authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Windmill 1.""" from kittysploit import...