CVE-2019-14251

CVE-2019-14251 is a high-severity path traversal vulnerability affecting Temenos T24 Channels R15.01. An unauthenticated attacker can exploit a flaw in the downloadDocServer() function, specifically within WealthT24/GetImage, to access arbitrary files and directories outside the intended restricted path on the server. This vulnerability has a CVSS score of 7.5, indicating a high potential for impact, primarily unauthorized information disclosure. While there is no evidence of active exploitation or Metasploit modules, Nuclei templates exist, and its high EPSS score suggests a significant likelihood of future exploitation. Community discussion and media coverage are minimal.