Threats tagged 'ghsa-c85f-3jpw-h6f8'

A path traversal vulnerability exists in FlowCI flow-core-x versions up to 1.23.49 in the FileHelper.unzip function. This vulnerability allows remote attackers to manipulate file paths during unzip operations. Exploitation is considered difficult due to high complexity, but public exploit code is available. The vendor has not responded to disclosure attempts, and no patch information is provided.