CyberRota Analysis
AI-GeneratedThe vulnerability in the FastAPI /marker/upload handler allows unauthenticated attackers to exploit a path traversal flaw by supplying malicious filenames, enabling them to write arbitrary files or delete existing files on the system. This critical issue poses a significant risk to any application utilizing the affected version of the marker library, particularly those handling file uploads. Organizations using this library should prioritize immediate remediation to prevent potential data breaches or system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the file.filename parameter. Unauthenticated attackers can supply filenames containing directory traversal sequences to write arbitrary files to any location or delete existing files on the system.