Uniong WebITR Absolute Path Traversal Vulnerability Allowing Arbitrary File Reading

A vulnerability allowing arbitrary file reading has been identified in Uniong's WebITR, specifically in version 2_1_0_32 and earlier. This vulnerability arises from an absolute path traversal issue, which remote attackers with regular privileges can exploit to download arbitrary system files.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive system files, potentially allowing for further exploitation or information disclosure.

Remediation

Users are advised to update WebITR to version 2_1_0_33 or later.