A critical directory traversal vulnerability in RiteCMS allows unauthenticated attackers to access sensitive system files, posing a significant risk to data confidentiality.

This is an incorrect access control flaw that manifests as a directory traversal vulnerability. The vulnerability is located within the /templates/ component and allows unauthenticated remote attackers to bypass security restrictions to access files on the underlying filesystem.

The ability for an unauthenticated attacker to read arbitrary files can lead to the exposure of sensitive configuration files, credentials, or source code. Given the CVSS score of 7.5, this high-severity vulnerability could facilitate further system compromise or lateral movement within the network, resulting in significant data leakage and potential regulatory non-compliance.

Immediate Action: Since a specific patch is not currently identified, users should restrict access to the /templates/ directory at the web server level or disable the affected component if it is not business-critical.

Proactive Monitoring: Monitor web server access logs for suspicious patterns, specifically looking for directory traversal sequences such as "../" in requests directed at the /templates/ endpoint.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to inspect and block incoming HTTP requests containing directory traversal payloads directed at the vulnerable component.

Public Exploit Available: Yes — a published proof-of-concept exists as documented in the researcher's write-up referenced in the CVE record.

This vulnerability represents a significant security risk due to the potential for unauthenticated data exfiltration. Organizations utilizing RiteCMS version 3.1.0 must prioritize implementing the suggested compensating controls immediately. Security teams should maintain a heightened state of vigilance and verify their exposure by auditing access logs for the indicators mentioned above until an official vendor update becomes available.