Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2022/06/17 12:18 a.m.•22 views

RustEmbed generated `get` method allows for directory traversal when reading files from disk

When running in debug mode and the debug-embed off by default feature is not enabled, the generated get method does not check that the input path is a child of the folder given. This allows attackers to read arbitrary files in the file system if they have control over the filename given. The...

3.2AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder