CVE-2021-43358: Sunnet eHRD - Path Traversal
Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path traversal attacks without authentication, access restricted paths and download system files.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2021-43358?
CVE-2021-43358 is considered to have a high severity due to its potential for remote exploitation and unauthorized access to sensitive files.
How do I fix CVE-2021-43358?
To fix CVE-2021-43358, ensure that you update Sunnet eHRD to the latest version that addresses the path traversal vulnerability.
What software versions are affected by CVE-2021-43358?
CVE-2021-43358 affects Sunnet eHRD versions 8 and 9.
Can CVE-2021-43358 be exploited without authentication?
Yes, CVE-2021-43358 allows attackers to exploit the vulnerability without requiring any authentication.
What type of attacks can be executed through CVE-2021-43358?
CVE-2021-43358 can be exploited to perform path traversal attacks, enabling access to restricted paths and system files.