CyberRota Analysis
AI-GeneratedPerspective 5.0.0 is vulnerable to a path traversal attack that enables unauthenticated remote attackers to access arbitrary files on the server by manipulating the HTTP request URL. This vulnerability can lead to the exposure of sensitive information, including system credentials and application secrets, due to inadequate query-string sanitization and permissive CORS settings. Organizations using this version should prioritize patching to mitigate the risk of data breaches and unauthorized access.
Original NVD Description
Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files from the server filesystem by including literal ../ segments in HTTP request URL paths. Attackers can bypass the insufficient query-string-stripping sanitization to traverse outside the configured asset root directory and retrieve sensitive files such as system credentials and application secrets, with results exposed cross-origin due to a wildcard Access-Control-Allow-Origin header set on all responses.