Threats tagged 'ghsa-237p-f2v6-hfc2'

CherryTree versions through 1.7.2 have a path traversal vulnerability in the function CtStorageXmlHelper::_create_image_from_xml. This flaw arises because the software trusts unvalidated 'filename' attributes embedded in XML documents. An attacker can craft specially designed .ctd, .ctz, or .ctx files with absolute or home-directory (~) paths and no data, potentially causing sensitive files like ~/.ssh/id_rsa to be saved into the document.