Openziti Zrok vulnerabilities
- netfoundry zrokzrok copy writes attacker-controlled WebDAV paths outside the destination root8.3 High
- netfoundry zrokzrok Python ProxyShare can be used as an SSRF proxy through absolute URL paths9.9 Critical
- netfoundry zrokzrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write8.7 High
- netfoundry zrokzrok's broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend records5.3 Medium
- netfoundry zrokzrok allows unauthenticated DoS via unbounded memory allocation in striped session cookie parsing7.5 High
- netfoundry zrokzrok has reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering6.1 Medium