This vulnerability involves improper limitation of a pathname to a restricted directory (path traversal) in the Aviation Weather from NOAA product by machouinard. It affects versions up to 0.7.2 and allows an attacker with network access and low privileges to cause a disruption of service. The CVSS 3.1 base score is 7.7, reflecting high severity due to the impact on availability and the ease of attack (network vector, low complexity, no user interaction). No patch or vendor advisory is currently provided.

The vulnerability can be exploited remotely by an attacker with low privileges to cause a denial of service, impacting the availability of the affected software. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected software to trusted users and networks to reduce exposure. Monitor vendor channels for updates regarding patches or official mitigations.