Threat database

MoAI-ADK versions up to 3.1.2 have an improper link resolution vulnerability in the moai init template deployer. This flaw allows malicious repositories to overwrite files outside the intended project directory by exploiting symlinked staging paths. Specifically, attackers can create symlinks that cause atomicWriteFile to overwrite victim-writable files with template content. The vulnerability has a medium severity rating and a CVSS score of 4.8.