GHSA-rrhw-54r8-545q
Path Traversal in FileGator
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | filegator/filegator | < 7.8.0 | 7.8.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Path Traversal in FileGator prior to 7.8.0 for non-admin users. Files created with `..\` as part of their name will be interpreted as a path. Users are thus able to add filesystem entries outside the scope of their user to their dashboard and subsequently are able to modify those files.
References
External links from the advisory. They lead to third-party sites.