CVE-2021-22933: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform an arbitrary file delete via a maliciously crafted web request...