This vulnerability exists in the cluster-admin:backup-datastore component of Controller v12.0.5, enabling directory traversal through specially crafted requests. Directory traversal vulnerabilities can allow unauthorized access to files and directories outside the intended scope. The CVE record does not include a CVSS score or detailed technical specifics beyond the general description. No patch or remediation guidance is currently available, and no known exploitation has been reported.

Successful exploitation could allow an attacker to access files and directories outside the intended backup datastore scope, potentially exposing sensitive information. The exact impact depends on the system configuration and what files are accessible via traversal. No known exploits or active attacks have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the cluster-admin:backup-datastore component and monitor for suspicious requests targeting directory traversal patterns.