Threats tagged 'ghsa-qc6r-chrx-m659'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.9	EPSS 0.4%	CVE-2026-71283fledge · Path Traversal Medium4.9EPSS 0.4%2026-08-05CVE Database V5CVE-2026-71283 Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), calls tarfile.extractall(temp_path) on an admin-uploaded tar archive with no filter argument and no per-member path validation. Requires the admin role (@has_permission("admin")). EPSS 0.4%Vulnerability fledge-iot CWE-22 #ghsa-qc6r-chrx-m659	CVE Database V5	2026-08-05

Page 1 of 1