CVE-2021-33211

Name of the Vulnerable Software and Affected Versions Elements-IT HTTP Commander version 5.3.3

Description A Directory Traversal issue in the Unzip feature allows remote authenticated users to write files to arbitrary directories via relative paths in ZIP archives.

Recommendations For Elements-IT HTTP Commander version 5.3.3, consider disabling the Unzip feature until a patch is available to prevent exploitation. Restrict access to sensitive directories to minimize the risk of arbitrary file writing.