CVE-2019-8903

CVE-2019-8903 is a path traversal vulnerability affecting Total.js Platform versions prior to 3.2.3, specifically within the index.js component. This high-severity vulnerability (CVSS 7.5) allows an unauthenticated attacker to read arbitrary files on the server with low attack complexity, potentially leading to sensitive information disclosure. While not listed on the KEV catalog or showing active exploitation, public exploit modules exist for Metasploit and Nuclei, indicating readily available exploit code. Despite this, the CVE has received minimal community discussion or media coverage.