beam-cloud/beta9 · Security
Beam Exposes sensitive information via joinCleanPath function
- GHSA ID
- GHSA-73jg-4qh6-3f4g
- CVE ID
- CVE-2025-69820
- Severity
- medium
- Published
- Updated
- CVSS
- 6 · CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS v3
- 6 · CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Description
Directory Traversal vulnerability in Beam beta9 v.0.1.552 allows a remote attacker to obtain sensitive information via the joinCleanPath function
CWEs
- CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')