Threats tagged 'ghsa-3686-mhhg-fr97'

Network-AI versions from 5.13.4 up to but not including 5.15.5 contain a path traversal vulnerability in the FileJobStore component. This flaw allows attackers who can control the job id parameter to read or delete arbitrary .json files by using directory traversal sequences. Exploitation can lead to disclosure of sensitive credentials and grant tokens or deletion of configuration files, potentially weakening the authorization mechanism of AuthGuardian.