CVE-2020-36939Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack:
rotection module to read sensitive system files like /etc/passwd and retrieve Apache Cassandra database credentials.