high8.2Public exploit code
CVE-2025-44177
A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- White Star Software Protop 4.4.2-2024-11-27 - Local File Inclusion (LFI)2025-07-16 · webapps · multiple
Impact
A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wss | Protop | Version 4.4.2-2024-11-27 |