Vendor
A path traversal vulnerability in the S3Destination.bucketName function of floci-io Floci allows remote attackers to manipulate the BucketARN argument via the S3 Destination Configuration Handler.