Description
White Star Software Protop是一款高效的网络监控和数据分析工具。该产品4.4.2-2024-11-27版本中存在目录遍历漏洞，由于未对用户输入进行充分过滤，攻击者可通过构造特殊路径读取服务器上的任意文件。此漏洞可导致敏感信息泄露，包括配置文件、数据库凭证等关键数据。
White Star Software Protop /pt3upd/ 目录遍历漏洞 （CVE-2025-44177）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-44177
https://www.sentinelone.com/vulnerability-database/cve-2025-44177/
https://access.redhat.com/security/cve/cve-2025-44177
https://github.com/advisories/GHSA-98m5-g5jg-4wf7
https://www.ameeba.com/blog/cve-2025-44177-directory-traversal-vulnerability-in-white-star-software-protop/
https://osv.dev/vulnerability/CVE-2025-44177
https://www.exploit-db.com/exploits/52367
https://gist.github.com/stSLAYER/4a2ecfbab1215a0be0dde59c4ac0122d
https://euvd.enisa.europa.eu/enisa/EUVD-2025-20833
https://lich-sec.io/zero-day-discoveries