CVE-2021-43685

Name of the Vulnerable Software and Affected Versions: libretime version hv3.0.0-alpha.10

Description: The issue is related to a path manipulation vulnerability. It affects the /blob/master/legacy/application/modules/rest/controllers/ShowImageController.php file through the rename function.

Recommendations: For libretime version hv3.0.0-alpha.10, consider restricting access to the ShowImageController.php file until a patch is available. As a temporary workaround, avoid using the rename function in the affected controller to minimize the risk of exploitation.