CyberRota Analysis
AI-GeneratedYu AI Code Mother v4.3 contains a path traversal vulnerability in its static resource interface, allowing unauthenticated users to access files outside the designated preview root directory. This could lead to unauthorized exposure of sensitive information stored on the server. Organizations using this version should prioritize patching this vulnerability to mitigate potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The static resource interface /api/static/{deployKey}/ of Yu AI Code Mother v4.3 is vulnerable to path traversal. The user-controlled path is concatenated to the preview root directory without any normalization, allowing anonymous attackers to read files outside the preview root.