Netfoundry Zrok vulnerabilities
- netfoundry zrok zrok copy writes attacker-controlled WebDAV paths outside the destination root 8.3 High
- netfoundry zrok zrok Python ProxyShare can be used as an SSRF proxy through absolute URL paths 9.9 Critical
- netfoundry zrok zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write 8.7 High
- netfoundry zrok zrok's broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend records 5.3 Medium
- netfoundry zrok zrok allows unauthenticated DoS via unbounded memory allocation in striped session cookie parsing 7.5 High
- netfoundry zrok zrok has reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering 6.1 Medium