White Star Software 漏洞列表

White Star Software Protop是一款高效的网络监控和数据分析工具。该产品4.4.2-2024-11-27版本中存在目录遍历漏洞，由于未对用户输入进行充分过滤，攻击者可通过构造特殊路径读取服务器上的任意文件。此漏洞可导致敏感信息泄露，包括配置文件、数据库凭证等关键数据。

A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences.

A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences.