A critical directory traversal vulnerability in Cassandra Web 0.5.0 allows unauthenticated attackers to read sensitive system files and capture database credentials, posing a severe risk to data confidentiality.

The application is susceptible to path traversal (CWE-22) because it fails to properly sanitize input before passing it to the file system, exacerbated by a disabled Rack::Protection module. An unauthenticated attacker can supply a crafted URL request to access arbitrary files, such as /etc/passwd or process command-line arguments containing database credentials.

Successful exploitation allows unauthorized access to sensitive system configuration files and sensitive credentials used for administrative database operations. Given the CVSS score of 7.5, this high-severity flaw enables an attacker to gain sufficient information to escalate access or pivot into the underlying Apache Cassandra database infrastructure, leading to potential data breach and full system compromise.

Immediate Action: Upgrade to version 0.6.0 or the latest available version provided by the vendor to resolve the directory traversal flaw.

Proactive Monitoring: Review web access logs for suspicious requests containing path traversal sequences like "../" or attempts to access common system files such as /etc/passwd or /proc/self/cmdline.

Compensating Controls: Implement a Web Application Firewall (WAF) to detect and block incoming requests containing directory traversal patterns. Ensure the application is deployed within a hardened containerized environment or sandbox to restrict access to the underlying file system.

Public Exploit Available: Yes, a functional exploit script is publicly available via Exploit-DB (EDB-ID 49362).

The presence of a public, weaponized exploit targeting this vulnerability presents an immediate and substantial risk to any organization running Cassandra Web 0.5.0. Administrators must prioritize updating to version 0.6.0 or higher immediately. If an immediate update is not feasible, restrict network access to the application and implement rigorous WAF filtering to prevent unauthorized file access.