White Star Software Protop is vulnerable to unauthenticated directory traversal, posing a severe risk of unauthorized file access and information disclosure.

This is a directory traversal vulnerability located in the /pt3upd/ endpoint. The flaw permits an unauthenticated, remote attacker to bypass file system restrictions using encoded traversal sequences to access sensitive files.

Successful exploitation allows an attacker to retrieve arbitrary files from the host system, which may include sensitive configuration files, credentials, or system data. Given the CVSS score of 8.2, this vulnerability represents a high risk to data confidentiality and integrity, potentially facilitating further system compromise or lateral movement.

Immediate Action: Update Protop to the latest version provided by White Star Software that remediates this directory traversal flaw.

Proactive Monitoring: Inspect web server access logs for suspicious request patterns containing encoded directory traversal sequences, such as dot-dot-slash patterns.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules specifically configured to block and log requests containing directory traversal sequences targeting the /pt3upd/ endpoint.

Public Exploit Available: Yes, an ExploitDB entry and a Nuclei template exist.

The presence of a public exploit significantly increases the risk of this vulnerability being leveraged by malicious actors. Administrators must prioritize patching the affected Protop installation immediately to close the exposed /pt3upd/ endpoint and prevent unauthorized file system access.