Threats tagged 'ghsa-vj8v-p5vw-m6v5'

XRootD contains a path traversal vulnerability that allows users to bypass directory export restrictions by appending a trailing '..' (without a trailing slash) to directory listing requests. This enables enumeration of files and directories outside the authorized export scope. File download outside the export scope remains blocked. The issue affects versions prior to 5.9.2 and is fixed in version 5.9.2.