CyberRota Analysis
AI-GeneratedDeepWiki-Open is vulnerable to an unauthenticated arbitrary file read attack through the GET /codemap/file endpoint, allowing attackers to exploit the repo_url parameter to bypass path containment checks. This vulnerability enables unauthorized access to sensitive files on the server, posing a significant risk to data confidentiality. Organizations using DeepWiki-Open should prioritize remediation to mitigate potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
DeepWiki-Open through commit d92819a contains an unauthenticated arbitrary file read vulnerability in the GET /codemap/file endpoint via the repo_url parameter. Attackers can supply a non-URL repo_url value to bypass path containment checks and read any file accessible to the API process by specifying absolute file paths.