Oasys Directory Traversal Vulnerability in ProcedureController

A directory traversal vulnerability has been identified in Oasys version 1.1, specifically within the ProcedureController. The issue arises because the application does not properly validate input, allowing attackers to manipulate the URI path to access unauthorized files. By replacing certain path segments with traversal sequences, it is possible to read files outside the intended directory.

Impact

Exploitation of this vulnerability allows for arbitrary file read, potentially leading to the disclosure of sensitive information.

Reproduction

To reproduce this vulnerability, send a request to the ProcedureController with a URI path that includes directory traversal sequences, such as '..'. The application will respond by directly outputting the requested file contents to the browser, bypassing any security filters.