Threats tagged 'ghsa-6p2w-vm5p-8648'

NextChat versions through 2.16.0 contain a directory traversal vulnerability in the WebDAV proxy. This flaw arises because the proxy does not properly canonicalize or reject dot path segments in its catch-all route. As a result, attackers can access sensitive information via authenticated or anonymous WebDAV endpoints.