Threats tagged 'ghsa-34ff-jfmp-74pg'

A path traversal vulnerability exists in Aklivity Zilla up to versions 1.3.4, 2.4.7, and 2.5.0-rc2 in the Path.resolve function of the FileSystemServerFactory component within the http-filesystem binding. This flaw allows remote attackers to manipulate path parameters to access unauthorized files. Public exploit code is available. Upgrading to version 2.5.0-rc3 addresses this issue.