This vulnerability in Contest Gallery involves improper limitation of pathname to a restricted directory, commonly known as a path traversal flaw. It allows an attacker with low privileges to access or influence file system paths outside the intended directory scope, which can lead to denial of service conditions. The CVSS score is 8.5 (high), reflecting network attack vector, low attack complexity, no user interaction, and a scope change with availability impact only. The affected versions include all versions up to 21.3.4. No official patch or vendor advisory is available at this time.

The vulnerability can be exploited remotely by an attacker with low privileges to cause denial of service (availability impact) on the affected Contest Gallery installations. There is no reported impact on confidentiality or integrity. No known exploits are currently in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected application to trusted users and monitor for unusual activity related to file path handling. Avoid exposing the application to untrusted networks if possible.