CyberRota Analysis
AI-GeneratedTaskingAI v0.3.0 in the DALL-E 3 image generation tool contains a path traversal vulnerability in the save_url_image function, enabling attackers to exploit the project_id parameter to write downloaded images to arbitrary locations on the server filesystem. This could lead to unauthorized data access or manipulation, posing a significant risk to server integrity. Organizations utilizing this version of TaskingAI should prioritize patching this vulnerability to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers to write downloaded images to arbitrary locations on the server filesystem by manipulating the project_id parameter.