CVE-2025-35430
CISA Thorium insecure downloaded file path validation
概要
CISA Thorium insecure downloaded file path validation
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
CISA Thorium does not adequately validate the paths of downloaded files via 'download_ephemeral' and 'download_children'. A remote, authenticated attacker could access arbitrary files subject to file system permissions. Fixed in 1.1.2.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web github.com
- web raw.githubusercontent.com
- web cve.org