The vulnerability resides in the _detail function of the doc.php controller within the URI Sanitizer component of PGYER Codefever. An attacker can manipulate the uri_string argument to perform path traversal, potentially reading arbitrary files on the underlying file system. The exploit is reachable from a remote context and the publicly disclosed code may be used by attackers to obtain sensitive information.

PGYER Codefever instances running any version up to the commit 0c35e60f006f9d558cc33a159baf110659351990 are affected. No specific versions are identified due to the rolling release model, but any release prior to the patch commit e4433eee96883a222403854e8ac38b3146774a07 is vulnerable.

The CVSS score of 6.9 indicates moderate severity. The EPSS score is not available, so the current degree of exploitation probability is unclear, and the vulnerability is not listed in CISA KEV. The attack vector is inferred to be remote, as the description states the attack may be initiated remotely. The path traversal weakness corresponds to CWE-22, which permits unauthorized file access.