This vulnerability involves improper handling of the url argument in the updateStoryboardUrl function of the Toonflow-app, which could allow path traversal attacks. The issue is located in the replaceUrl.ts file within the Storyboard Export component. Remote exploitation is possible by manipulating the url parameter. However, the vendor indicates that the interface is designed to accept only local or trusted domain URLs configured in docker, implying that exploitation requires user code modification. No official remediation or patch has been provided as of the publication date. The CVSS 4.0 base score is 5.3, indicating medium severity.

If successfully exploited, this vulnerability could allow an attacker to perform path traversal, potentially accessing unauthorized files on the system where Toonflow-app is running. However, the vendor's statement suggests that under normal configurations, the risk is limited because the URL input is restricted to local or trusted domains. There is no confirmed exploitation in the wild, and the actual impact depends on the deployment environment and whether the user modifies the code to allow malicious URLs.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vendor notes that the interface is designed to restrict URLs to local or trusted domains, so ensuring that the application is used with default configurations and without user code modifications reduces risk. Monitor vendor communications for any official fixes or updates.