Threats tagged 'ghsa-539j-9cqc-ppx4'

A path traversal vulnerability exists in Lspace-io lspace-server affecting file operations in the Repositories File API. The flaw allows manipulation of the filePath argument in functions such as fileExists, readFile, writeFile, and deleteFile. Exploitation requires local access. No specific affected or fixed versions are available due to the product's continuous delivery model and lack of vendor response.