An unauthenticated arbitrary file read vulnerability in DocSys-master V2.02.85 poses a significant risk of sensitive information disclosure.

This vulnerability exists in the downloadDocEx interface located in src/com/DocSystem/controller/DocController.java. It allows an unauthenticated attacker to read arbitrary files from the underlying file system.

The ability to read arbitrary files can lead to the exposure of sensitive configuration files, source code, or credentials, potentially resulting in full system compromise. With a CVSS score of 7.5, this high-severity flaw represents a significant risk to data confidentiality and organizational security posture.

Immediate Action: Since a patch is currently unavailable, restrict network access to the affected interface and monitor the application for suspicious file access requests.

Proactive Monitoring: Review web server and application logs for anomalous requests to the downloadDocEx endpoint, specifically looking for directory traversal patterns.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to block unauthorized access to the vulnerable downloadDocEx endpoint and filter input parameters for directory traversal characters.

Public Exploit Available: Yes, a published proof-of-concept exists in the technical write-up referenced by the CVE record.

Given the high CVSS score and the existence of a public proof-of-concept, organizations using DocSys-master V2.02.85 must prioritize mitigating this risk immediately. Apply the suggested compensating controls and maintain a heightened monitoring posture until an official vendor patch is released and applied.