Description
Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WellChoose | Organization Portal System | ≤ IFTOP_P3_2_1_196 | — |
References
- https://www.twcert.org.tw/tw/cp-132-10321-3cae5-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-10325-70192-2.html third-party-advisory