This vulnerability in Squeeze (<= 1.7.7) involves a path traversal issue triggered by the '.../...//' sequence. It allows an attacker with low privileges to access files outside the intended directory scope, potentially exposing sensitive information. The CVSS 3.1 base score is 5.0, indicating a medium severity with network attack vector, low attack complexity, and no user interaction required. The impact is limited to confidentiality loss without affecting integrity or availability.

The vulnerability may allow unauthorized reading of files outside the intended directory, leading to partial confidentiality loss. There is no impact on data integrity or system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected software and monitor for suspicious activity related to path traversal attempts. Avoid exposing the vulnerable service to untrusted networks if possible.