Path Traversal which allows file upload capability affects DRYiCE MyXalytics

DRYiCE MyXalytics has a vulnerability that lets attackers upload files to unintended locations on the server by manipulating file paths. This allows them to potentially overwrite important files or execute malicious code.

A path traversal flaw in DRYiCE MyXalytics file upload endpoints permits unauthenticated or authenticated users to specify arbitrary file paths during upload operations, enabling placement of files outside intended directories. The vulnerability stems from insufficient input validation on file path parameters, potentially leading to remote code execution or unauthorized file system access.