GHSA-m9hc-vxjj-4x6qMediumCVSS 6.5

PGHoard Path Traversal vulnerability

Published
December 17, 2024
Last Modified
December 18, 2024

🔗 CVE IDs covered (1)

📋 Description

A vulnerability has been discovered that could allow an attacker to acquire disk access with privileges equivalent to those of pghoard, allowing for unintended path traversal. Depending on the permissions/privileges assigned to pghoard, this could allow disclosure of sensitive information.

🎯 Affected products1

  • pip/pghoard:< 2.6.1-rc

🔗 References (4)