<!-- ############################ Do not remove the line above ############################ --> <!-- Note that this issue is configured (see the quick actions at the bottom) to be created as confidential. Note that a vulnerability does not need to actually be resolved before it is reported and that these reports can be revised as needed (reopen the issue to request changes). If you do not know how to fill certain fields, mark that in the comment and we will help you. --> <!-- Required. Specify the project's name (e.g., "Eclipse Dash") and Eclipse Foundation ID, e.g., "technology.dash". --> ## Basic information **Project name:** Eclipse Ankaios **Project id:** automotive.ankaios ## What are the affected versions? v0.5.1 through v1.0.1 ## Details of the issue Reported as the Ankaios organization: https://github.com/eclipse-ankaios/ankaios/security/advisories/GHSA-rp6v-x3q5-cp2g) I already increased `Privileges required` to `High` as an attacker would require a hijacked workload in order to execute the attack. Please advise if we should also create a CVE for the topic. ## Steps to reproduce See security advisory above. ## Do you know any mitigations of the issue? Not using a wildcard at the start of a filter mask, e.g., "*.some.path".