CVE-2021-45448 Pentaho Business Analytics Server - Pentaho Analyzer plugin exposes a service endpoint for templates which allows a user supplied path to access resources that are out of bounds.

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Pentaho Analyzer plugin"
    ],
    "product": "Pentaho Business Analytics Server",
    "vendor": "Hitachi Vantara",
    "versions": [
      {
        "lessThan": "9.2.0.2",
        "status": "affected",
        "version": "9.2",
        "versionType": "ALL"
      },
      {
        "lessThan": "8.3.0.25",
        "status": "affected",
        "version": "1.0",
        "versionType": "All"
      }
    ]
  }
]