Threats tagged 'ghsa-xfv3-v32f-xwfc'

Open Notebook version 1.8.3 has a vulnerability in its file upload functionality due to lack of user input validation. This flaw allows an authenticated application user with limited privileges to perform path traversal attacks, enabling access to local files within the Docker container hosting the application. The vulnerability has a CVSS v3.1 score of 6.5, indicating a medium severity impact focused on confidentiality loss without integrity or availability impact.