Aehrc Pathling vulnerabilities
- aehrc pathling Pathling: $import-pnp operation enables authenticated SSRF, credential leakage, and warehouse data poisoning 8.6 High
- aehrc pathling Pathling: Typed CRUD/search/batch providers can lead to server-wide PHI exfiltration and cross-resource mutation 8.7 High
- aehrc pathling Pathling $bulk-submit allows bearer-token exfiltration and persistent warehouse poisoning via unvalidated manifest output URLs 8.7 High
- aehrc pathling Pathling has path traversal in $result endpoint that allows arbitrary warehouse file read 8.7 High
- aehrc pathling Pathling: Explicit oauthMetadataUrl in bulk-submit allows OAuth client credential exfiltration 8.7 High
- aehrc pathling Pathling has path traversal in $import-pnp manifest that enables read-capable SSRF via /jobs/{jobId}/{filename} 8.7 High