CVE-2017-20105

CVE-2017-20105 is a critical path traversal vulnerability affecting Simplessus versions prior to 3.8.3. An authenticated attacker can remotely manipulate the 'path' argument with a specially crafted input (e.g., ..%2f..%2fetc%2fpasswd) to access arbitrary files on the system. This vulnerability carries a CVSS score of 8.1 (High) due to its network attack vector, low complexity, and high impact on confidentiality and integrity. While the exploit has been publicly disclosed, there is no evidence of active exploitation, Metasploit modules, or significant community discussion, suggesting limited real-world impact to date.