CyberRota Analysis
AI-GeneratedThe vulnerability in the yeqifu warehouse Java application allows for path traversal due to improper handling of file paths in the FileController.java file, enabling remote attackers to manipulate file access. Organizations utilizing this software should prioritize patching or mitigating this issue, as the exploit has been publicly disclosed and could be actively leveraged by malicious actors. Given the medium severity rating, it is crucial for users to assess their exposure and implement necessary safeguards promptly.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue affects some unknown processing of the file src/main/java/com/yeqifu/sys/controller/FileController.java. This manipulation of the argument path causes path traversal. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.