Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/30 6:36 p.m.23 views

CefSharp.Common: `FolderSchemeHandlerFactory` path boundary check can expose files outside the configured root folder

Summary FolderSchemeHandlerFactory was intended to restrict served files to a configured rootFolder, but its path validation used a raw string prefix check. A request could escape to a sibling directory whose full path starts with the root folder path, allowing files outside the configured root t...

5.3CVSS5.8AI score0.00293EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder