This vulnerability in Primer MyData for Woocommerce involves a path traversal flaw using the sequence '.../...//'. It affects versions up to 4.2.8 and could allow unauthorized reading of files outside the intended directory structure. The CVSS score is 5.3, indicating medium severity with network attack vector, low attack complexity, no privileges or user interaction required, and limited confidentiality impact. No official patch or vendor advisory details are available at this time.

An attacker could exploit this vulnerability to read files on the server that are outside the intended directory scope of the application, potentially exposing sensitive information. The impact is limited to confidentiality loss; integrity and availability are not affected. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application and monitor for unusual file access patterns related to path traversal attempts.