Threats tagged 'ghsa-r466-rxw4-3j9j'

A path traversal vulnerability in the Evolver tool's fetch command allows attackers to write files to arbitrary filesystem locations via the --out flag. The flag accepts user input without validation, enabling directory traversal that can overwrite critical files or place malicious files in sensitive directories. This can lead to arbitrary file write, potentially enabling privilege escalation or persistent backdoors if exploited with sufficient permissions. The issue affects versions prior to 1.69.3 and has been fixed in version 1.69.3.