Beveiligingsadvies

CVE-2026-103648

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-10-02 16:05:25
Laatst bijgewerkt 2026-10-03 15:52:55
Toegewezen door GitLab
CVSS-score 9.1
Status PUBLISHED

Beschrijving

Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination directory.