CyberRota Analysis
AI-GeneratedCloud Commander versions prior to 19.20.2 are vulnerable to a critical directory traversal flaw in their REST file-operation and markdown endpoints, allowing attackers to bypass path validation and access files outside the intended root directory. This vulnerability can lead to unauthorized file manipulation, including reading, writing, moving, or copying sensitive files. Organizations using affected versions should prioritize patching to mitigate potential data breaches and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory.