CVE-2021-22748

Name of the Vulnerable Software and Affected Versions C-Bus Toolkit versions 1.15.9 and prior C-Gate Server versions 2.11.7 and prior

Description The issue exists due to improper limitation of a pathname to a restricted directory, also known as a path traversal vulnerability. This could allow a remote attacker to execute arbitrary code when a file is saved.

Recommendations For C-Bus Toolkit versions 1.15.9 and prior, update to a version later than 1.15.9 to resolve the issue. For C-Gate Server versions 2.11.7 and prior, update to a version later than 2.11.7 to resolve the issue. As a temporary workaround, consider restricting access to the directory where files are saved to minimize the risk of exploitation.