Threats tagged 'ghsa-ggcw-rwmj-9238'

An unauthenticated arbitrary file deletion vulnerability exists in Participants Database versions up to and including 2.7.8.4. This vulnerability allows an attacker without authentication to delete files on the affected system. The issue is classified under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), indicating a path traversal or similar flaw. The vulnerability has a high severity rating with a CVSS score of 7.4, primarily impacting availability.