CyberRota Analysis
AI-GeneratedA vulnerability in the logDetailCat endpoint of alldatacenter alldata versions up to 0.6.8 allows for path traversal through manipulation of the executorAddress argument in the FileInputStream function. This flaw can be exploited remotely, potentially leading to unauthorized access to sensitive files on the server. Organizations using this Java component should prioritize remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in alldatacenter alldata up to 0.6.8. This impacts the function FileInputStream of the file /admin/controller/JobLogController.java of the component logDetailCat Endpoint. This manipulation of the argument executorAddress causes path traversal. It is possible to initiate the attack remotely. The exploit has been published and may be used. The project closed the issue report as "not planned" without any further explanation.