Htmly · Htmly · CVE-2021-33354
**Name of the Vulnerable Software and Affected Versions**
htmly versions prior to 2.8.1
**Description**
The issue allows remote attackers to perform arbitrary file deletions via a modified `file` parameter. This is a Directory Traversal vulnerability, which enables attackers to access files outside the intended directory structure.
**Recommendations**
For versions prior to 2.8.1, update to version 2.8.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the `file` parameter in affected API endpoints until a patch is available.