Ayeshaaaa472

**Name of the Vulnerable Software and Affected Versions** HUBzero CMS versions prior to 2.2.33 **Description** A path traversal issue exists in project file upload handlers. This allows authenticated project members to write arbitrary files outside the project repository by supplying traversal sequences in upload parameters. This action is performed with web server privileges and could potentially lead to code execution. **Recommendations** Update HUBzero CMS to version 2.2.33 or later.