CVE-2023-35844
packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that a...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension (.csv or .png) is used.
Références
- advisory advisory.dw1.io
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web github.com