NetSight
high7.5

CVE-2021-43358

Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path traversal attacks without authentication, a…

Impact

Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path traversal attacks without authentication, access restricted paths and download system files.

Affected products

VendorProductAffected versions
SunEhrd
Versions 8, 9

Weakness classification

References