Gorilla Tag Console Path Traversal Vulnerability Allowing Arbitrary File Write

A path traversal vulnerability has been identified in the Gorilla Tag Console mod management tool, in versions prior to 2.7.0. This vulnerability allows users to manipulate file paths using a combination of backslashes and periods to escape the intended directory and write files to unauthorized locations. The issue has been addressed in version 2.8.0.

Impact

Exploitation of this vulnerability could lead to unauthorized file writes, potentially allowing for the execution of malicious code or modification of game assets.

Remediation

Users can update to Console version 2.8.0 to address this vulnerability.