Berrynet
Monthly
Path traversal in DT42 BerryNet through 3.10.2 lets low-privilege remote users read file metadata outside the intended model directory by supplying a crafted label to DLModelManager.get_model_meta. Exploitation requires valid low-level credentials and some user interaction, and the assessed impact is limited to low confidentiality disclosure with no integrity or availability effect. Publicly available exploit code exists, and no confirmed active exploitation is indicated in the provided intelligence.
Path traversal in DT42 BerryNet through 3.10.2 lets low-privilege remote users read file metadata outside the intended model directory by supplying a crafted label to DLModelManager.get_model_meta. Exploitation requires valid low-level credentials and some user interaction, and the assessed impact is limited to low confidentiality disclosure with no integrity or availability effect. Publicly available exploit code exists, and no confirmed active exploitation is indicated in the provided intelligence.