Threats tagged 'ghsa-hp52-9xmj-3539'

A path traversal vulnerability exists in OtterMind Chat2DB up to version 5.3.8, specifically in the DbMybatisGenerateServiceImpl.generateClass function. This flaw allows remote attackers to manipulate the tableName argument to perform unauthorized path traversal. Public exploit code is available, and the vendor has not responded to disclosure attempts. The vulnerability has a high severity rating with a CVSS score of 7.3.