Description
Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path traversal attacks without authentication, access restricted paths and download system files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sunnet | eHRD | 8, 9 | — |