CyberRota Analysis
AI-GeneratedDocSys V2.02.80 is susceptible to an unauthenticated file download vulnerability, allowing attackers to exploit the downloadDocEx.do interface to access arbitrary files by manipulating the targetPath parameter. This could lead to unauthorized exposure of sensitive information stored on the server. Organizations using this version of DocSys should prioritize remediation to mitigate potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath.