Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure
Vulnerability Description
A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences (e.g., ../) to access files outside the intended static directory, resulting in local file disclosure.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
Ray 路径遍历漏洞
Vulnerability Description
Ray是ray-project开源的一个用于扩展 AI 和 Python 应用程序的统一框架。 Ray 2.8.1之前版本存在路径遍历漏洞，该漏洞源于静态文件处理机制中对用户提供路径的验证和清理不当，可能导致攻击者利用路径遍历序列访问预期静态目录之外的文件，造成本地文件泄露。
CVSS Information
N/A
Vulnerability Type
N/A