MRCMS Directory Enumeration Vulnerability

A directory enumeration vulnerability has been identified in MRCMS version 3.1.2, specifically within the file management module. The vulnerability exists in the '/admin/file/list.do' endpoint, which lacks proper authentication and input validation. This oversight allows remote attackers to enumerate directory contents on the server without any credentials.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the server's directory structure, exposure of sensitive configuration files, and information disclosure that may facilitate further attacks.

Reproduction

To reproduce this vulnerability, send a GET request to the '/admin/file/list.do' endpoint with a 'path' parameter that includes directory traversal sequences. This will enumerate the contents of the specified directory on the server.