Ai3 QbiCRMGateway Arbitrary File Reading Vulnerability via Relative Path Traversal

A vulnerability allowing arbitrary file reading has been identified in the QbiCRMGateway application developed by Ai3. This issue arises from relative path traversal, which enables unauthenticated remote attackers to download arbitrary system files. The vulnerability affects QbiCRMGateway versions 7.5.1 through 8.5.03.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive system files, potentially allowing for further attacks or information disclosure.

Remediation

Users are advised to update QbiCRMGateway to version 8.5.04 or later, or to install the available patch.