The defect permits an attacker to supply crafted fullPath and fileName parameters to the fileManager storeFile endpoint, allowing them to write or overwrite any file located in the service’s writable directories. This results in the ability to place malicious files that could lead to remote code execution if the web application subsequently processes them.

The vulnerability affects risesoft-y9 Digital‑Infrastructure versions 9.6.5 through 9.6.11. Any deployment of these versions that exposes the /rest/storeFile endpoint to clients is susceptible.

The CVSS score of 8.8 indicates a high‑severity flaw, and the current EPSS score is not available. The vulnerability is not listed in the CISA KEV catalog. Because authentication is not required to trigger the flaw, an attacker can exploit it from any network‑accessible location by sending a crafted POST request to /rest/storeFile, causing the application to create or overwrite files and potentially execute code.