Threats tagged 'ghsa-r5mx-3xq2-429g'

OpsTree BuildPiper versions prior to 2.7.0 have a path traversal vulnerability that allows authenticated users with build configuration permissions to read arbitrary files on the build worker. This is achieved by supplying unvalidated dockerfile_path and build context values, enabling attackers to specify traversal or absolute paths such as /etc/passwd. The file contents are then disclosed in the build log when a build is triggered.