This vulnerability in neoslab Database Toolset (versions up to 1.8.4) involves improper limitation of a pathname to a restricted directory, commonly known as a path traversal flaw. It allows an attacker to manipulate file paths to access directories outside the intended restricted scope. The CVSS 3.1 base score is 8.6, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and a scope change with an availability impact.

The vulnerability can be exploited remotely without authentication or user interaction to cause an availability impact on the affected system. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits have been reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Until a patch is released, users should monitor vendor communications for updates and consider restricting network access to the affected service where possible.