An unauthenticated path traversal vulnerability in knowns versions prior to 0.30.0 allows attackers to overwrite arbitrary files on the server by supplying malicious traversal sequences in the import route name parameter.
knowns +1
remote-code-execution
cve
vulnerability
path-traversal
mcp
2r
6t
1c
updated