~ / search / GHSA-5mp4-32rr-v3x5

GHSA-5mp4-32rr-v3x5

Absolute path traversal vulnerability in digdag server

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-25125

Packages

EcosystemPackageAffectedFixed in
Maven io.digdag:digdag-server < 0.10.5.1 0.10.5.1

Details

As written in the advisory (Markdown source, shown as plain text).

### Summary Treasure Data's digdag workload automation system is susceptible to a path traversal vulnerability if it's configured to store log files locally. ### Impact This issue may lead to Information Disclosure.

References

External links from the advisory. They lead to third-party sites.