CyberRota Analysis
AI-GeneratedA path traversal vulnerability in the Log File Download Endpoint of the affected Java component allows remote attackers to manipulate the `fileName` argument, potentially leading to unauthorized file access. Organizations using version 2.7.4-20260107 of the wvp-GB28181-pro should prioritize patching this flaw to mitigate the risk of exploitation, as public exploits are already available.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in 648540858 wvp-GB28181-pro 2.7.4-20260107. This vulnerability affects unknown code of the file LogController.java of the component Log File Download Endpoint. The manipulation of the argument fileName results in path traversal. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.