Skip to content
OpenAdvisories

Product · modu-ai

moai-adk

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.4

    MoAI-ADK through 3.1.2 Symlink Following via moai init Template Deployer

    MoAI-ADK through 3.1.2 contains an improper link resolution vulnerability in the moai init template deployer that allows malicious repositories to overwrite files outside the project via a symlinked .moai-tmp staging path. Attackers can commit a symlink such …