Threats tagged 'ghsa-c2vr-5g2g-3597'

Jadaptive Maverick Synergy Server versions before 3.0.33 and 3.1.x before 3.1.7, along with Maverick Legacy Server before 1.8.1, have an improper path equivalence vulnerability. This flaw in the VirtualFileFactory.canonicalisePath function allows authenticated users to bypass mount-level access controls by using specially crafted paths with duplicate separators or dot segments. This can enable unauthorized read or write access to files that should be restricted by the child mount's policy.