Welltend Technology BPMFlowWebkit Absolute Path Traversal Vulnerability Allowing Arbitrary File Read

A vulnerability allowing arbitrary file read has been identified in BPMFlowWebkit developed by Welltend Technology, affecting versions prior to 5.0.5. This vulnerability arises from absolute path traversal, enabling unauthenticated remote attackers to download arbitrary system files.

Impact

Exploitation of this vulnerability allows for unauthorized access to sensitive system files, which could lead to further attacks or information disclosure.

Remediation

Users are advised to update BPMFlowWebkit to version 5.0.5 or later.