The vulnerability of the Q-Free MaxTime traffic light control software lies in improper restrictions on path names in the directory structure, allowing a violator to gain unauthorized access to protected information.

The vulnerability of the Q-Free MaxTime traffic light management software is related to an incorrect limitation on the path name for the maxtime/api/database/database. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information through a...