Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8ff7-83pv-r7gf

Опубликовано: 17 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection.

A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection.

EPSS

Процентиль: 25%
0.00087
Низкий

7.5 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 7.5
nvd
4 месяца назад

A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection.

EPSS

Процентиль: 25%
0.00087
Низкий

7.5 High

CVSS3

Дефекты

CWE-22