Threats tagged 'ghsa-vqc6-v48c-q9rf'

Otter Wiki versions from 2.20.1 up to but not including 2.26.2 contain a file disclosure vulnerability in the DataTable embedding feature. This flaw allows attackers who have page editing permissions, including anonymous users under default settings, to read internal repository files by specifying an absolute path such as /.git/config. This can expose sensitive information like stored remote credentials.