A vulnerability in the web interface for managing and interacting with the Cassandra database allows a malicious actor to read arbitrary files, due to an incorrect name limit on the directory path.

The vulnerability of the Rack::Protection web interface for managing and interacting with the Cassandra Web database lies in an incorrect restriction on the path name to the directory. Exploiting this vulnerability allows a malicious actor to read arbitrary files...