CyberRota Analysis
AI-GeneratedopenSIS Classic 9.3 is vulnerable to an authenticated path traversal flaw in its legacy messaging sent-mail attachment download feature, enabling authenticated attackers to access arbitrary files on the server through specially crafted path traversal sequences. This vulnerability poses a medium risk, as it could lead to unauthorized data exposure. Organizations using openSIS Classic 9.3 should prioritize remediation to safeguard sensitive information from potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionality that allows an authenticated attacker to read arbitrary files on the server via crafted path traversal sequences.
Related CVEs
Other vulnerabilities affecting the same vendor(s)