PT-2021-20329

Name of the Vulnerable Software and Affected Versions: Cartadis Gespage versions 8.2.1 and earlier Description: The issue allows Directory Traversal in the "gespage/doDownloadData" and "gespage/webapp/doDownloadData" API endpoints. Recommendations: For Cartadis Gespage versions 8.2.1 and earlier,...

CVE-2021-33807: Improper Limitation of a Pathname to a Restricted Directory

Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData...