Sunnet eHRD CTMS Arbitrary File Reading Vulnerability via Relative Path Traversal

A vulnerability allowing arbitrary file reading has been identified in the eHRD CTMS application developed by Sunnet. This issue arises from a relative path traversal flaw, which remote attackers with administrator privileges can exploit to download arbitrary system files.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive system files, potentially allowing for further attacks or information disclosure.