Threats tagged 'ghsa-whpq-2rxm-79rp'

web2py version 3.2.2-stable contains a directory traversal vulnerability in the read_file() and write_file() functions within applications/admin/controllers/webservices.py. This flaw allows an attacker with high privileges to read or write arbitrary files on the server, potentially leading to confidentiality and integrity breaches. The vulnerability has a medium severity rating with a CVSS score of 6.5.