CyberRota Analysis
AI-GeneratedThe vulnerability arises from art-template's sub-template resolution logic, which improperly resolves file paths without validating that they remain within the designated root directory. This flaw allows attackers to exploit applications that accept external input for sub-template names, potentially leading to unauthorized access and reading of arbitrary files on the server's filesystem. Organizations utilizing art-template in their Node.js applications should prioritize addressing this issue to mitigate the risk of data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
art-template's sub-template resolution logic (src/compile/adapter/resolve-filename.js), used by both the include and extend template directives, resolves the target file path via path.resolve(root, filename) with no check afterward that the result remains inside root.