Lucene search
+L

1 matches found

OSV
OSV
added 2025/01/08 3:43 p.m.8 views

GHSA-J4JW-M6XR-FV6C Soft Serve vulnerable to path traversal attacks

Impact Path traversal attack gives access to existing non-admin users to access and take over other user's repositories. A malicious user then can modify, delete, and arbitrarily repositories as if they were an admin user without explicitly giving them permissions. Patches This is patched in v0.8...

5.3CVSS9.4AI score0.00665EPSS
SaveExploits0References5
Rows per page
Query Builder