Skip to content
OpenAdvisories

Vendor

modu-ai

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 4.4

    MoAI-ADK through 3.1.2 Symlink Following via moai init Template Deployer

    MoAI-ADK through 3.1.2 contains an improper link resolution vulnerability in the moai init template deployer that allows malicious repositories to overwrite files outside the project via a symlinked .moai-tmp staging path. Attackers can commit a symlink such …