This vulnerability involves a path traversal flaw in the Blocks module of Daylight Studio FuelCMS v1.5.2, enabling attackers to traverse directories outside the intended scope. The vulnerability is publicly disclosed but lacks detailed technical or impact data, CVSS scoring, or vendor remediation information. No patch or fix status is currently known, and no exploits have been reported in the wild.

The vulnerability could allow unauthorized access to files outside the intended directory structure, potentially exposing sensitive information or enabling further attacks depending on the file access obtained. However, no specific impact details or exploitation reports are available.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigation steps are provided in the available data.