{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3arisesoftdigital-infrastructure9.6.11/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:risesoft:digital-infrastructure:9.6.5:*:*:*:*:*:*:*","cpe:2.3:a:risesoft:digital-infrastructure:9.6.11:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-110115"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Digital-Infrastructure (9.6.5-9.6.11)"],"_cs_severities":["high"],"_cs_tags":["web-application-vulnerability","path-traversal","credential-exposure"],"_cs_type":"advisory","_cs_vendors":["Risesoft"],"content_html":"\u003cp\u003eRisesoft Digital-Infrastructure versions 9.6.5 through 9.6.11 contain a path traversal vulnerability in the Y9FileController.retrieveFileStream handler within the fileManager component. This vulnerability stems from improper validation of user-supplied input in the fullPath and fileName parameters, allowing unauthenticated attackers to escape the intended directory scope. By sending crafted HTTP GET requests to the /rest/retrieveFileStream endpoint, an attacker can access arbitrary files on the underlying filesystem. This flaw poses a significant risk, as it enables the retrieval of sensitive configuration files such as application.yml. Successful exploitation results in the exposure of database, Redis, and Nacos credentials, which could lead to further unauthorized access, data exfiltration, or complete compromise of the backend infrastructure.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated attackers to read any file on the server accessible to the application process. In enterprise environments, this typically leads to the theft of environment configuration files containing clear-text credentials for database, Redis, and Nacos instances. This exposure can facilitate lateral movement within the network and potential compromise of the entire application deployment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePatch Risesoft Digital-Infrastructure to the latest version available after 9.6.11 immediately.\u003c/li\u003e\n\u003cli\u003eMonitor web server logs for requests to the /rest/retrieveFileStream endpoint containing path traversal sequences (e.g., ../ or ..).\u003c/li\u003e\n\u003cli\u003eEnforce strict input validation on all application parameters that influence file path construction.\u003c/li\u003e\n\u003cli\u003eReview logs for unauthorized access patterns specifically targeting configuration files like application.yml.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-13T18:37:37Z","date_published":"2026-10-13T18:37:37Z","id":"https://feed.craftedsignal.io/briefs/2026-10-risesoft-path-traversal/","summary":"Risesoft Digital-Infrastructure versions 9.6.5 through 9.6.11 contain a path traversal vulnerability in the fileManager component, allowing unauthenticated attackers to read sensitive files via the /rest/retrieveFileStream endpoint.","title":"Path Traversal Vulnerability in Risesoft Digital-Infrastructure","url":"https://feed.craftedsignal.io/briefs/2026-10-risesoft-path-traversal/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:risesoft:digital-Infrastructure:9.6.11:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}