Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination directory.CreditsAmirhossein Roustaei (@eternullsec), Eternull SecurityReferenceshttps://gitlab.com/demsking/image-downloader/-/work_items/32https://gitlab.com/demsking/image-downloader/-/commit/fb4454304276e2439fb19b98836b3ba903b3aaea
