critical9.8
CVE-2021-43685
libretime hv3.0.0-alpha.10 is affected by a path manipulation vulnerability in /blob/master/legacy/application/modules/rest/controllers/ShowImageController.php…
Impact
libretime hv3.0.0-alpha.10 is affected by a path manipulation vulnerability in /blob/master/legacy/application/modules/rest/controllers/ShowImageController.php through the rename function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libretime | Libretime Hv | Version 3.0.0 |