The vulnerability is an Absolute Path Traversal flaw in the Police Statistics Database System from Gotac. It permits unauthenticated remote attackers to retrieve arbitrary system paths, exposing sensitive file structure information. This can lead to further exploitation of other weaknesses and compromise confidentiality.

Gotac Police Statistics Database System. Versions prior to 1.0.3 are affected; the fix is available in version 1.0.3 and later.

The CVSS base score is 6.9 indicating a medium severity. EPSS is <1%, suggesting low likelihood of exploitation at present. The vulnerability is not listed in KEV, so no known active exploitation. Attackers can exploit it remotely without authentication by supplying a file path that resolves outside the intended directory.