WS-2023-0125

unilogies/bumsys prior to 2.2.0 is vulnerable to Path Traversal. The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' doubled triple dot slash sequences that can resolve to a location that is outside ...