Threats tagged 'ghsa-pp2v-mwxg-7p57'

A path traversal vulnerability exists in the Persistor._decompress function of the Model Persistor component in crownpku Rasa_NLU_Chi up to version 0.12.2. This vulnerability allows remote attackers with low privileges to manipulate file paths, potentially leading to unauthorized access or modification of files. Public exploit code is available, but no official fix or patch has been released yet.