CVE-2025-44177

A directory traversal vulnerability (CWE-22) exists in White Star Software Protop version 4.4.2-2024-11-27 within the /pt3upd/ endpoint. An unauthenticated remote attacker can use encoded traversal sequences to read arbitrary files on the underlying operating system, potentially exposing sensitiv...