PT-2021-7734
CVE-2021-22736
·
تاريخ النشر
2021-05-11
·
تاريخ التحديث
2021-06-04
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
homeLYnk (Wiser For KNX) versions prior to V2.60
spaceLYnk versions prior to V2.60
Description
The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This could cause a denial of service when an unauthorized file is uploaded. The vulnerability can be exploited by a remote attacker to cause a denial of service.
Recommendations
For homeLYnk (Wiser For KNX) versions prior to V2.60, update to a version V2.60 or later.
For spaceLYnk versions prior to V2.60, update to a version V2.60 or later.
As a temporary workaround, consider restricting file uploads to authorized files only until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾