Threats tagged 'ghsa-gww9-3rx9-535x'

Axel Download Accelerator versions 2.17.14 and earlier contain a directory traversal vulnerability due to improper URL percent-decoding of the output filename. This allows attackers to craft URLs with encoded sequences that traverse directories, causing the program to write downloaded files to arbitrary filesystem locations relative to the current working directory.