An unauthenticated directory traversal vulnerability in the warehouse management system allows attackers to read arbitrary files from the server, posing a significant risk to data confidentiality.

The application fails to sanitize user-controlled path parameters within the /file/showImageByPath endpoint. This allows an unauthenticated attacker to perform directory traversal, enabling unauthorized access to sensitive files on the host system.

Successful exploitation allows unauthorized parties to read sensitive configuration files, credentials, or system data, which could facilitate further compromise of the infrastructure. With a CVSS score of 7.5, this vulnerability represents a high risk because it is remotely exploitable without authentication, potentially leading to a total loss of confidentiality regarding internal system information.

Immediate Action: Contact the vendor immediately to obtain a security patch or configuration update for version 1.2. If no official patch is available, restrict network access to the vulnerable /file/showImageByPath endpoint.

Proactive Monitoring: Review web server access logs for unusual patterns, specifically looking for directory traversal sequences like "../" within requests targeting the /file/showImageByPath path.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to inspect and block incoming HTTP requests containing directory traversal sequences or unauthorized path traversal attempts.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the GitHub issue referenced in the vulnerability disclosure.

Given the high CVSS score and the presence of a public proof-of-concept, organizations should treat this vulnerability with high priority. We strongly recommend implementing strict input validation and access controls for the affected endpoint immediately, while prioritizing the application of any forthcoming vendor security updates to permanently resolve the underlying code flaw.