Threats tagged 'ghsa-cv6g-fvjc-qjxv'

A path traversal vulnerability exists in floci-io Floci versions up to 2.1.0 in the S3Destination.bucketName function of the S3 Destination Configuration Handler component. This vulnerability allows remote attackers to manipulate the BucketARN argument, potentially leading to unauthorized access or modification of files. The issue is fixed in version 2.2.0. Public exploit code is available, but there are no confirmed reports of exploitation in the wild.