Application Insights Profiler
Monthly
Path traversal in Microsoft Application Insights Profiler allows an authenticated low-privilege network attacker to escalate privileges, with high confidentiality, integrity, and availability impact. The CVSS 8.8 vector (AV:N/AC:L/PR:L/UI:N) indicates exploitation requires no special conditions beyond a valid low-privilege account and network reachability, making the barrier to exploitation low. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low complexity and high impact profile warrant prompt remediation.
Path traversal in Microsoft Application Insights Profiler allows an authenticated low-privilege network attacker to escalate privileges, with high confidentiality, integrity, and availability impact. The CVSS 8.8 vector (AV:N/AC:L/PR:L/UI:N) indicates exploitation requires no special conditions beyond a valid low-privilege account and network reachability, making the barrier to exploitation low. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low complexity and high impact profile warrant prompt remediation.