WellChoose Organization Portal System Absolute Path Traversal Vulnerability Allowing Arbitrary File Reading

A vulnerability allowing arbitrary file reading has been identified in the WellChoose Organization Portal System, specifically in versions through IFTOP_P3_2_1_196. This vulnerability arises from an absolute path traversal issue, which enables unauthenticated remote attackers to download arbitrary system files.

Impact

Exploitation of this vulnerability allows for unauthorized access to sensitive system files, which could lead to further exploitation or information disclosure.

Remediation

Users are advised to update the Organization Portal System to version IFTOP_P3_2_1_197 or later.