Evidently
Monthly
Path traversal in Evidently UI's dataset materialization endpoint exposes arbitrary host filesystem files to unauthenticated remote attackers. The filename parameter in the materialization API is unsanitized, enabling directory traversal sequences or absolute paths to escape the workspace directory; the materialized file is then retrievable via the download endpoint. No active exploitation has been confirmed (not listed in CISA KEV), and no patched version has been identified at time of analysis - all known versions remain vulnerable per the wildcard CPE.
Path traversal in Evidently UI's dataset materialization endpoint exposes arbitrary host filesystem files to unauthenticated remote attackers. The filename parameter in the materialization API is unsanitized, enabling directory traversal sequences or absolute paths to escape the workspace directory; the materialized file is then retrievable via the download endpoint. No active exploitation has been confirmed (not listed in CISA KEV), and no patched version has been identified at time of analysis - all known versions remain vulnerable per the wildcard CPE.