CVE-2021-41551

Name of the Vulnerable Software and Affected Versions Leostream Connection Broker version 9.0.40.17

Description The issue allows administrators to conduct directory traversal attacks by uploading a ZIP file that contains a symbolic link. This can potentially lead to unauthorized access to sensitive files or directories.

Recommendations For Leostream Connection Broker version 9.0.40.17, consider restricting the upload of ZIP files or implementing validation checks to prevent the inclusion of symbolic links as a temporary workaround until a patch is available.