Threats tagged 'ghsa-w7m5-fqxg-p9q5'

A Command Injection vulnerability in Looker due to improper file path sanitization (Directory Traversal) allows an attacker with Developer permissions to execute arbitrary shell commands when a user is deleted on the host system. Looker-hosted instances have been mitigated and require no user action. Self-hosted instances must upgrade to patched versions to address this vulnerability.