WellChoose Organization Portal System Arbitrary File Reading Vulnerability

A vulnerability allowing arbitrary file reading has been identified in the WellChoose Organization Portal System, specifically in versions through IFTOP_P3_2_1_196. This vulnerability arises from absolute path traversal, which remote attackers with regular privileges can exploit to download arbitrary system files.

Impact

Exploitation of this vulnerability allows for unauthorized access to sensitive system files, which could lead to further exploitation or disclosure of confidential information.

Remediation

Users are advised to update to version IFTOP_P3_2_1_197 or later.