TVN ID	TVN-202111006
CVE ID	CVE-2021-43358
CVSS	7.5 (High) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products	Sunnet eHRD version 8 & 9
Description	Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path traversal attacks without authentication, access restricted paths and download system files.
Solution	Update Sunnet eHRD version to 10
Credit	Cyku Hong(DEVCORE)
Public Date	2021-11-30