CyberRota Analysis
AI-GeneratedThe Veno File Manager Project version 4.4.9 is vulnerable to an absolute path disclosure due to improper handling in the RelativePath.Example1.php file, allowing unauthenticated attackers to determine the system directory of the application. This exposure can facilitate further attacks, such as directory traversal or code injection, by revealing critical information about the server's file structure. Organizations using this file manager should prioritize patching or mitigating this vulnerability to protect against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to know in which system directory the application code is running by sending a GET request to the endpoint.