Interinfo DreamMaker Arbitrary File Read Vulnerability via Relative Path Traversal

A vulnerability allowing arbitrary file read has been identified in Interinfo DreamMaker versions through 2.2. This issue arises from relative path traversal, which privileged local attackers can exploit to download arbitrary system files.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive system files, potentially allowing for further exploitation or information disclosure.

Remediation

Users are advised to update to Interinfo DreamMaker version 2.3 or later.