Threats tagged 'ghsa-m6rh-5rpr-64jf'

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 and 12.0.1.0 through 12.0.12.29 contain a vulnerability that allows a local attacker to perform arbitrary file writes. This occurs due to improper validation of pathnames during archive extraction, which could be exploited to write files to unintended locations.