Threats tagged 'ghsa-q97r-7gmj-rv8g'

A path traversal vulnerability exists in WebTorrent versions up to 2.8.5 and 3.0.21 in the getFileModtimes function of the torrent.js file. This vulnerability allows remote attackers to manipulate the file.path argument, potentially accessing unauthorized file system locations. The issue is publicly known and exploit code is available, but the maintainers have closed the related GitHub issue as "not planned" for a fix.