CyberRota Analysis
AI-Generatedyx-image-recognition v1.0 is susceptible to a Path Traversal vulnerability, allowing attackers to manipulate file paths through unsanitized parameters like dir and filePath, potentially leading to unauthorized file access on the server. Organizations using this software should prioritize remediation to prevent exploitation that could compromise sensitive data. Immediate attention is recommended for those managing file operations in their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File() for file system operations without any path sanitization or whitelist validation.