Guangzhou Huayi Intelligent Technology Jeewms Path Traversal Vulnerability

A critical path traversal vulnerability has been identified in Guangzhou Huayi Intelligent Technology Jeewms versions through 20241229. The issue arises in the file /wmOmNoticeHController.do, where improper handling of external input allows attackers to traverse directories and access files outside of the intended directory. This vulnerability can be exploited remotely without authentication, potentially leading to unauthorized access to sensitive files.

Impact

Exploitation of this vulnerability could result in unauthorized access to files outside the restricted directory, potentially compromising sensitive information.

Remediation

Users are advised to upgrade to Jeewms version 20250101 to address this vulnerability.