Absolute path traversal vulnerability in digdag server
Moderate severity
GitHub Reviewed
Published
Feb 14, 2024
in
treasure-data/digdag
•
Updated Feb 14, 2024
Description
Published to the GitHub Advisory Database
Feb 14, 2024
Reviewed
Feb 14, 2024
Last updated
Feb 14, 2024
Credits
-
p- Reporter
Summary
Treasure Data's digdag workload automation system is susceptible to a path traversal vulnerability if it's configured to store log files locally.
Impact
This issue may lead to Information Disclosure.
References