Threats tagged 'ghsa-hr6c-84vf-jf53'

A path traversal vulnerability in the BOSH agent allows an attacker with access to IaaS metadata to cause the agent to write a root-owned file with a partially attacker-controlled content to any path ending in .network. The vulnerability also permits creation of missing parent directories with mode 0777 via network alias on Ubuntu systems. This affects all BOSH agent versions prior to v2.847.0, including jammy versions up to v1.1202 and noble versions up to v1.364.