Threats tagged 'ghsa-f9qv-qgvr-6jvv'

A path traversal vulnerability exists in Webpro-nl Knip up to version 6.44.0 in the writeFile function of the Workspace Handler component. This flaw allows remote attackers to manipulate the workspaces argument to perform unauthorized file system access. The vulnerability has a medium severity with a CVSS score of 6.3. Public exploit details have been disclosed, but no vendor response or patch is currently available.