Threats tagged 'ghsa-gqqc-7rm5-p6gm'

A path traversal vulnerability exists in cube-root/directory-serve versions through 1.3.7 that allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option. This vulnerability can lead to high impact on integrity and availability without requiring authentication or user interaction.