Lucene search
+L

4 matches found

osv_ghsa
osv_ghsa
•added 2022/06/17 12:18 a.m.•79 views

GHSA-CGW6-F3MJ-H742 RustEmbed generated `get` method allows for directory traversal when reading files from disk

When running in debug mode and the debug-embed off by default feature is not enabled, the generated get method does not check that the input path is a child of the folder given. This allows attackers to read arbitrary files in the file system if they have control over the filename given. The...

7.5CVSS7.3AI score0.01645EPSS
SaveExploits1References3
Rows per page
Query Builder