CVE-2019-16876

Name of the Vulnerable Software and Affected Versions Portainer versions prior to 1.22.1

Description The issue is related to incorrect restriction of directory path names in a directory with limited access. Exploitation of this issue may allow a remote attacker to upload arbitrary files to the system.

Recommendations For versions prior to 1.22.1, update to version 1.22.1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive directories to minimize the risk of exploitation.