TAGFREE X-Free Uploader Path Traversal Vulnerability Allowing Arbitrary File Download

A path traversal vulnerability has been identified in TAGFREE X-Free Uploader versions 1.0.1.0084 prior to 1.0.1.0085 and 2.0.1.0034 prior to 2.0.1.0035. This vulnerability arises from inadequate validation of parameter values in the file download feature, allowing for the arbitrary download of files from the server.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server.

Remediation

Users are advised to update to X-Free Uploader version 1.0.1.0085 or 2.0.1.0035. Please check the TAGFREE website for update instructions.