CyberRota Analysis
AI-GeneratedThe vulnerability arises in the ResourceCacheService of Spring AI, where the method getCacheName() improperly constructs on-disk filenames by appending URI fragments without sanitization, allowing for potential directory traversal attacks. This could lead to unauthorized file access or overwriting of files on the server. Organizations using affected versions of Spring AI should prioritize this issue to mitigate risks associated with file system manipulation.
Original NVD Description
ResourceCacheService.getCacheName() builds the on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, and passes the result to new File(resourceParentFolder, newFileName) before writing the downloaded bytes there. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.9 and earlier
Related CVEs
Other vulnerabilities affecting the same vendor(s)