A path traversal vulnerability in the Dancer2 framework allows unauthenticated remote attackers to read arbitrary files from the host server, posing a significant risk to system confidentiality.

The vulnerability exists in the File route handler, which fails to properly sanitize relative path segments when joining requests to the public directory. This flaw allows an unauthenticated attacker to escape the restricted directory and access any file readable by the application process, including configuration files.

Successful exploitation permits unauthorized access to sensitive application data, including configuration files containing credentials or environment settings. With a CVSS score of 7.5, this high-severity flaw enables remote attackers to compromise the confidentiality of the entire application environment without requiring any prior authentication.

Immediate Action: Upgrade to Dancer2 version 2.2.0 or later immediately to apply the necessary path validation fixes.

Proactive Monitoring: Monitor server access logs for requests containing path traversal patterns, such as sequences of dot-dot-slash (../) or their percent-encoded equivalents targeting sensitive file paths.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block requests containing relative path traversal sequences or attempts to access restricted directory structures.

Public Exploit Available: Unknown

Given the potential for complete exposure of application configuration and sensitive data, organizations utilizing the Dancer2 framework must prioritize this update. Administrators should verify their configuration to ensure the File route handler is properly managed and that the environment is running the patched version 2.2.0 or later to eliminate the risk of unauthorized file access.