Security Advisory

CVE-2026-103648

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-10-02 16:05:25
Last updated 2026-10-03 15:52:55
Assigner GitLab
CVSS score 9.1
State PUBLISHED

Description

Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination directory.