high7.5
CVE-2024-4388
This does not validate a path generated with user input when downloading files, allowing unauthenticated user to download arbitrary files from the server
Impact
This does not validate a path generated with user input when downloading files, allowing unauthenticated user to download arbitrary files from the server
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.