Threats tagged 'ghsa-wxf6-4gvx-qq4q'

Kopia versions up to 0.23.1 have a path traversal vulnerability in the copyDirectoryContent function. This flaw allows users with repository write access to escape the intended restore directory by using specially crafted directory entry names such as '..'. As a result, during restore operations with default settings, attacker-controlled content can be written outside the designated restore directory.