Lucene search
+L

220 matches found

Github Security Blog
Github Security Blog
added 2026/07/24 4:14 p.m.30 views

Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)

Impact Kiota generates AI plugin manifests from an OpenAPI description. When the description contains an x-ai-capabilities response semantics statictemplate or the adaptive-card extension x-ai-adaptive-card, the file reference is written into the generated manifest's...

6.1CVSS5.8AI score0.01479EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder