CVE-2021-44665

Name of the Vulnerable Software and Affected Versions Xerte Project Xerte versions 3.10.3 and earlier

Description A Directory Traversal issue exists when downloading a project file via "download.php". This allows for potential access to sensitive files outside the intended directory.

Recommendations For versions 3.10.3 and earlier, update to a version later than 3.10.3 to resolve the issue. As a temporary workaround, consider restricting access to the "download.php" file until a patch is available.