A vulnerability was found in Gerapy up to 0.9.13, affecting the project_create function in gerapy/server/core/views.py. The manipulation of the project_name argument leads to path traversal. Remote exploitation is possible. The exploit has been disclosed publicly. The patch identifier is 6e481078cfba6388a67ca2d9792288405019ba3e. This vulnerability allows attackers to traverse the file system, potentially [truncated]
A vulnerability has been found in Gerapy up to 0.9.13, affecting the Project Upload Endpoint in the file gerapy/server/core/views.py. This vulnerability leads to missing authentication, allowing remote attackers to exploit it. The patch bd4891c60315f17611a3b7a651ffe0fba7cfe71e has been released to fix this issue. Users of Gerapy up to 0.9.13 should apply the patch and monitor their installations for suspi [truncated]
