1 matches found
Bugsink path traversal via event_id in ingestion
Summary In affected versions, ingestion paths construct file locations directly from untrusted eventid input without validation. A specially crafted eventid can result in paths outside the intended directory, potentially allowing file overwrite or creation in arbitrary locations. Submitting such...
7.2CVSS7.2AI score0.00538EPSS
SaveExploits0References11Affected Software1
20