An authenticated path traversal vulnerability in ICEcoder versions 8.0 through 8.1 allows attackers to read, write, or delete arbitrary files on the host system.

The application fails to properly enforce document root confinement within the File::check() function due to an incorrect comparison where the result of realpath() is compared against a boolean true. This logic error allows an authenticated attacker to bypass path restrictions by submitting malicious file parameters, resulting in arbitrary file system access.

Successful exploitation allows an attacker to perform unauthorized file operations, including reading sensitive configuration files, modifying application code to achieve remote code execution, or deleting critical system data. Given the CVSS score of 8.8, this vulnerability poses a high risk of total system compromise, potentially leading to a complete breach of confidentiality, integrity, and availability of the affected server.

Immediate Action: As no official patch is currently identified, administrators should restrict access to the ICEcoder instance to trusted users only and monitor the environment for unauthorized file activity.

Proactive Monitoring: Review web server and application access logs for unusual file paths containing directory traversal sequences, such as "../", or requests directed at sensitive system files located outside the defined document root.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block path traversal attempts and directory traversal payloads in GET and POST parameters.

Public Exploit Available: No

This vulnerability represents a significant security risk for any environment utilizing affected versions of ICEcoder. Because the flaw allows for unauthorized file manipulation by authenticated users, it is imperative to limit access to the software until a vendor-supplied patch is available. Organizations should prioritize the implementation of WAF rules and enhanced logging to detect potential exploitation attempts.