Threats affecting pkg:github/rConfig

rConfig versions prior to 8.2.13 contain a path traversal vulnerability in the download_export() method. Authenticated attackers can exploit this flaw by supplying directory traversal sequences in the filename GET parameter to read arbitrary files outside the intended export directory. This can expose sensitive files such as application environment files with encryption keys, database credentials, and mail configuration.