Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/18 12:55 a.m.14 views

Zio has SubFileSystem Path Confinement Bypass via Unresolved `..` Segment

Summary SubFileSystem fails to confine operations to its declared sub path when the input path is /../ or equivalents /../, /..\. This path passes all validation but resolves to the root of the parent filesystem, allowing directory level operations outside the intended boundary. Affected Componen...

5.7AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder