CVE-2019-13343

CVE-2019-13343 is a pre-authentication path traversal vulnerability affecting Butor Portal before version 1.0.27. This flaw allows an unauthenticated remote attacker to download arbitrary files from the server by manipulating the 'theme t' parameter in the WhiteLabelingServlet. With a CVSS score of 7.5 (HIGH), exploitation is straightforward, requiring no user interaction or authentication, and can lead to significant information disclosure. While there is no evidence of active exploitation or public exploit code in Metasploit or ExploitDB, the vulnerability has garnered notable community discussion.