GHSA-4xgf-cpjx-pc3j
MediumSummary
`NestedSecretsSettingsSource` reads secret values from files in a configured `secrets_dir`. When `secrets_nested_subdir=True`, a directory entry inside `secrets_dir` that is a symbolic link pointing outside `secrets_dir` is followed, allowing access to files outside the configured directory.
Risk Assessment
The organization may be exposed to sensitive data disclosure as secret files could reside in unauthorized locations. This poses a risk of information leakage and security breaches.
Recommendation
It is recommended to disable the following of symbolic links pointing outside `secrets_dir` and to review the access configuration for secret directories.
Original NVD description (English source)
### Summary `NestedSecretsSettingsSource` reads secret values from files in a configured `secrets_dir`. When `secrets_nested_subdir=True`, a directory entry inside `secrets_dir` that is a symbolic link pointing **outside** `secrets_dir` is followed, so files outside the configured directory are rea