CyberRota Analysis
AI-GeneratedAn unauthenticated path traversal vulnerability allows attackers to exploit the /custom-sounds/ endpoint when the CustomSounds storage is set to FileSystem, enabling them to read arbitrary files outside the designated base directory by manipulating the request path with ../ sequences. This poses a significant risk of data exposure and potential information leakage. Organizations utilizing this configuration should prioritize remediation to safeguard sensitive information from unauthorized access.
Original NVD Description
An unauthenticated path traversal (LFI) vulnerability exists under /custom-sounds/ when CustomSounds storage is configured to FileSystem. By including ../ sequences in the request path, an attacker can read arbitrary files outside the base directory.