CVE-2021-22736

Name of the Vulnerable Software and Affected Versions homeLYnk (Wiser For KNX) versions prior to V2.60 spaceLYnk versions prior to V2.60

Description The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This could cause a denial of service when an unauthorized file is uploaded. The vulnerability can be exploited by a remote attacker to cause a denial of service.

Recommendations For homeLYnk (Wiser For KNX) versions prior to V2.60, update to a version V2.60 or later. For spaceLYnk versions prior to V2.60, update to a version V2.60 or later. As a temporary workaround, consider restricting file uploads to authorized files only until a patch is available.