Lucene search
+L

2 matches found

OSV
OSV
added 2026/07/16 2:46 p.m.5 views

CVE-2026-59866 Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName

Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.5, Kiota emitted x-ms-kiota-info clientClassName and clientNamespaceName values without identifier or path sanitization as both generated client class or namespace names and generated output path components when kiota generate ra...

9.3CVSS6.2AI score0.01355EPSS
SaveExploits0References6
Rows per page
Query Builder