1 matches found
GHSA-G72F-JW3W-MGH7 @openhop/server: Path Traversal in Flow ID File Operations
Path Traversal in Flow ID File Operations Summary @openhop/server passes unsanitized HTTP route parameters directly to path.join when constructing filesystem paths for flow YAML files. An unauthenticated attacker who can reach the server can read arbitrary .yaml files accessible to the OpenHop...
8.3CVSS
SaveExploits0References3
20