Product
An unauthenticated path traversal vulnerability in the marker library up to version 2.0.0 allows attackers to overwrite or delete arbitrary files on the system by manipulating the file.filename parameter.