Threats tagged 'ghsa-h2gv-ghr5-8mhj'

agent-zero versions 1.7, 1.8, 1.9, and 1.10 contain a directory traversal vulnerability in the save_file_b64 method of python/helpers/file_browser.py. This method does not properly normalize or validate user-supplied file paths, allowing attackers to write files outside the intended directory.