A directory traversal vulnerability in knowns-dev/knowns allows unauthenticated remote attackers to read sensitive files, posing a significant security risk.

This is a directory traversal vulnerability occurring within the get_doc and update_doc tools. An unauthenticated attacker can supply a crafted path value to bypass security controls and access unauthorized portions of the file system.

Successful exploitation allows unauthorized access to sensitive data stored on the host system. Given the CVSS score of 7.5, this high-severity vulnerability could lead to the exposure of configuration files, credentials, or proprietary information, directly impacting data confidentiality and potentially facilitating further attacks.

Immediate Action: Update knowns-dev/knowns to version 0.11.4 or later, which implements case-insensitive matching and per-segment canonicalization to neutralize traversal attempts.

Proactive Monitoring: Review web server and application logs for suspicious path traversal patterns, such as sequences containing "../" or encoded directory navigation characters.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block directory traversal attempts targeting application parameters.

Public Exploit Available: Yes, a public proof-of-concept exists as indicated by the available data.

This vulnerability presents a high risk to organizational data integrity and confidentiality. Administrators must prioritize upgrading to version 0.11.4 immediately to resolve the directory traversal flaw and prevent potential unauthorized file system access.