Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2023/12/13 1:35 p.m.45 views

Unauthenticated db-file-storage views

Impact In Nautobot 1.x and 2.0.x, the URLs /files/get/?name=... and /files/download/?name=... are used to provide admin access to files that have been uploaded as part of a run request for a Job that has FileVar inputs. Under normal operation these files are ephemeral and are deleted once the Job...

5.3CVSS7.3AI score0.00748EPSS
SaveExploits0References10Affected Software1
Rows per page
Query Builder