CyberRota Analysis
AI-GeneratedCAI Content Credentials is vulnerable to a path traversal issue that allows attackers to read arbitrary files outside the designated directory restrictions. This could lead to unauthorized access to sensitive information without requiring any user interaction. Organizations utilizing CAI Content Credentials should prioritize addressing this vulnerability to mitigate potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Arbitrary file system read. An attacker could leverage this vulnerability to gain unauthorized read access to files or directories outside the intended restrictions. Exploitation of this issue does not require user interaction. Scope is changed.
Related CVEs
Other vulnerabilities affecting the same vendor(s)