This critical path traversal vulnerability in Softlink Education Oliver Library Server allows unauthenticated attackers to access sensitive system files.

The vulnerability exists in the FileServlet endpoint, which fails to properly sanitize the 'fileName' parameter. This allows unauthenticated attackers to conduct path traversal attacks to read arbitrary files from the server's filesystem.

Successful exploitation allows an attacker to bypass access controls and retrieve sensitive system configuration files, credentials, or other private data stored on the server. The high severity of this flaw (CVSS 9.8) underscores the risk of significant information disclosure, which could facilitate further attacks against the infrastructure.

Immediate Action: Update Oliver Library Server to version 8.00.008.053 or higher to address the input sanitization flaw.

Proactive Monitoring: Review web access logs for directory traversal patterns (e.g., "../") in requests directed at the FileServlet endpoint.

Compensating Controls: Deploy WAF rules designed to detect and block path traversal sequences in URL parameters to provide temporary protection.

Public Exploit Available: Yes — an entry exists on ExploitDB (50599).

Given the existence of a public exploit and the ease of unauthenticated access, this vulnerability poses a significant risk to data confidentiality. Organizations must prioritize applying the vendor-provided patch to all instances of the Oliver Library Server immediately.