Threats tagged 'ghsa-cr5j-j45g-7pmc'

Jpom versions up to 2.11.12 have an authorization bypass vulnerability in the SshFileController. Authenticated users with SSH file permissions in any workspace can exploit this flaw by supplying foreign SSH asset IDs, allowing them to access SSH hosts of other workspaces. This enables unauthorized reading, modification, and deletion of files across workspaces via multiple endpoints.