Threat database

Paisa versions before 0.7.8 have a path traversal vulnerability in several handlers that allows unauthenticated attackers to read arbitrary files and delete backup files outside intended directories by using crafted file names with ../ sequences.