Threats tagged 'ghsa-4v26-phwj-4v5r'

Formwork versions prior to 2.3.13 contain a path traversal vulnerability in the BackupController. Authenticated users with backup download or delete permissions can exploit this flaw by supplying a specially crafted base64-encoded traversal payload. This payload bypasses PHP basename on Linux systems, allowing access to files outside the intended backup directory. The vulnerability enables reading or deleting arbitrary files on the server.