Threats tagged 'ghsa-9qx3-7v72-8555'

TeamDavid's Webbox application by Tobit Laboratories AG is vulnerable to arbitrary file write, enabling unauthenticated attackers to create or modify files on the server with attacker-controlled content. This can lead to stored cross-site scripting (XSS) when malicious files are accessed by users. The vulnerability arises from improper validation of user input written directly to files. It affects TeamDavid through Rollout 524.