Lucene search
+L

1 matches found

RustSec
RustSec
added 2021/11/29 12:0 p.m.44 views

RustEmbed generated `get` method allows for directory traversal when reading files from disk

When running in debug mode and the debug-embed off by default feature is not enabled, the generated get method does not check that the input path is a child of the folder given. This allows attackers to read arbitrary files in the file system if they have control over the filename given. The...

7.5CVSS3.2AI score0.01593EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder