This vulnerability (CWE-22) in Mamunur Rashid Classified Listing allows improper limitation of pathnames to restricted directories, enabling path traversal attacks. An attacker with network access and low privileges can exploit this to read sensitive files outside the intended directory scope. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges are low, no user interaction needed, unchanged scope, high confidentiality impact, and no impact on integrity or availability. The affected product versions include all up to 5.3.8. No patch or official remediation guidance is currently available.

Successful exploitation could lead to unauthorized disclosure of sensitive information by reading files outside the restricted directory. The impact is limited to confidentiality with no reported effects on integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected application to trusted users and monitor for suspicious activity related to file access. Avoid exposing the application to untrusted networks if possible.