Threats tagged 'ghsa-f262-872p-52hv'

Devika version 1.0 contains a directory traversal vulnerability in the Coder.save_code_to_project function. This flaw allows attackers with limited privileges to write files outside the intended project workspace, potentially leading to full compromise of confidentiality, integrity, and availability of the system. The vulnerability has a high severity with a CVSS score of 8.8. No patch or official fix information is currently provided.