CVE-2021-43685

libretime hv3.0.0-alpha.10 is affected by a path manipulation vulnerability in /blob/master/legacy/application/modules/rest/controllers/ShowImageController.php through the rename function.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-12-01

Last modified

2024-08-04

Weaknesses

CWE-610

Affected products

• Libretime Hv (Libretime)

References

• https://github.com/LibreTime/libretime/issues/1437