Jhenggao iPublish System Arbitrary File Reading Vulnerability

An arbitrary file reading vulnerability has been identified in the iPublish System developed by Jhenggao. This vulnerability allows unauthenticated remote attackers to read arbitrary system files. The issue arises from a path traversal flaw that can be exploited to access restricted files on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive system files, potentially allowing attackers to read confidential information or application data.

Remediation

For institutions using the iPublish System on-premises, it is recommended to contact the vendor to check for updates. Alternatively, consider disabling external access and restricting use to within the campus.