Threats tagged 'ghsa-9wgq-4cmq-jhvv'

OpenChamber 1.11.7 has a critical path traversal vulnerability in its file-serving API endpoints that allows unauthenticated remote attackers to read arbitrary files by bypassing workspace boundary checks. This can expose sensitive files such as JWT signing secrets, SSH private keys, API credentials, and environment variables, enabling full authentication bypass on password-protected deployments.