Threats Tagged 'ghsa-hm5p-8v8f-2vgm'

A path traversal vulnerability exists in knowns through version 0.33.0 due to improper validation of the path query parameter in the workspace browse endpoint. This flaw allows remote attackers to enumerate arbitrary directories on the host filesystem by traversing the directory structure. The vulnerability can be used to locate project directories and potentially identify targets for further exploitation.