Cassandra Database Directory Path Traversal

The vulnerability of the Rack::Protection web interface for managing and interacting with the Cassandra Web database lies in an incorrect restriction on the path name to the directory. Exploiting this vulnerability allows a malicious actor to read arbitrary files...