Lucene search
+L

4 matches found

OSV
OSV
•added 2022/06/17 12:18 a.m.•79 views

GHSA-CGW6-F3MJ-H742 RustEmbed generated `get` method allows for directory traversal when reading files from disk

When running in debug mode and the debug-embed off by default feature is not enabled, the generated get method does not check that the input path is a child of the folder given. This allows attackers to read arbitrary files in the file system if they have control over the filename given. The...

7.5CVSS7.3AI score0.01593EPSS
SaveExploits1References3
Rows per page
Query Builder