This vulnerability in FULL Customer (up to version 3.1.25) involves a path traversal issue where the input '.../...//' can be used to navigate directories improperly. An attacker with network access and low privileges can exploit this to read sensitive files outside the intended directory scope. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability. No official patch or remediation guidance is currently available.

The vulnerability allows unauthorized disclosure of sensitive information by enabling path traversal attacks. This compromises confidentiality but does not affect system integrity or availability. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected FULL Customer versions and monitor for suspicious activity related to path traversal attempts. Avoid exposing the vulnerable service to untrusted networks if possible.