Threats tagged 'ghsa-x62g-47x5-v7vf'

Zr.Admin.NET versions from commit 0ee1ab8 through eb9228a have a path traversal vulnerability in the /common/DownloadFile endpoint. This flaw allows any logged-in user to read arbitrary files on the server by manipulating the path parameter with absolute paths or directory traversal sequences. Sensitive files such as appsettings can be accessed, potentially exposing the JwtSettings SecretKey, which attackers can use to forge administrator tokens.