Description (CNA)
Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path traversal attacks without authentication, access restricted paths and download system files.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Sunnet / eHRD | affected 8; affected 9 |
CWE
CWE-22
References
ADP enrichment
No English description supplied.