The vulnerability arises in PMWeb 7.x, 8.x, and 2025.x and permits an attacker to manipulate the FullFileName or FileName query arguments in the downloader.aspx component. This manipulation enables a path traversal attack that can read files outside the intended directory. The description does not specify the nature or sensitivity of the files that can be accessed; it is inferred that the attacker could read any files that the web server process can read, potentially including configuration files or credentials, but this is not explicitly stated in the disclosure.

The affected systems are PMWeb installations running versions 7.x, 8.x, and 2025.x. The product is made by the vendor PMWeb and is referenced as PMWeb in the CPE listing. No specific sub‑versions or build numbers are provided, so all minor releases within the major branches are considered vulnerable.

The CVSS score of 6.9 indicates a moderate to high impact if exploited. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The description states that the attack can be initiated remotely and that a public exploit has been made available, implying that exploitation is possible over the network without prior authentication. No vendor remediation has been released or confirmed, increasing the urgency for mitigations.