CyberRota Analysis
AI-GeneratedA path traversal vulnerability exists in the better-auth better-icons component, specifically in the scan_project_icons/sync_icon functionality, allowing local attackers to manipulate the icons_file argument. This could lead to unauthorized access to files outside the intended directory, potentially exposing sensitive data. Developers and system administrators using versions up to 1.0.5 should prioritize patching this issue to mitigate the risk of local exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in better-auth better-icons up to 1.0.5. This vulnerability affects unknown code of the component scan_project_icons/sync_icon. Such manipulation of the argument icons_file leads to path traversal. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.