CyberRota Analysis
AI-GeneratedA path traversal vulnerability exists in the handleCodeReplace() function of versions prior to 0.30.0, allowing attackers to overwrite arbitrary files outside the project root by supplying crafted paths. This could lead to the compromise of sensitive files, such as shell startup scripts or SSH configuration files, potentially enabling further exploitation of the system. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized file manipulation and potential system breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace() function that allows attackers to overwrite arbitrary files outside the project root. Attackers can supply absolute paths or relative paths containing directory traversal sequences to write malicious content to sensitive files like shell startup scripts or SSH configuration files.