CyberRota Analysis
AI-GeneratedThe vulnerability allows remote attackers to exploit the workspace browse endpoint by failing to validate the path query parameter, enabling directory enumeration on the host filesystem. This could lead to the discovery of sensitive project directories, potentially facilitating further attacks. Organizations using affected versions should prioritize remediation to mitigate the risk of unauthorized access and data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories on the host filesystem. Attackers can traverse the directory structure to locate project directories and identify targets for further exploitation.