TI-2026-80147 CVE-2026-116067 · GHSA-c69r-vcvw-qgm3
Path traversal in Paisa lets attackers read files and delete backups
Priority MEDIUM 47
Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read files and delete backups through ../ sequences…