CVE-2021-45027

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-45027
An arbitrary file download vulnerability in Oliver v5 Library Server Versions < 5.00.008.053 via the FileServlet function allows for arbitrary file download by an attacker using unsanitized user supplied input.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.exploit-db.com/exploits/50599 Exploit Third Party Advisory VDB Entry
https://www.softlinkint.com/product/oliver/ Product Vendor Advisory
https://www.exploit-db.com/exploits/50599 Exploit Third Party Advisory VDB Entry
https://www.softlinkint.com/product/oliver/ Product Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:softlinkint:oliver_v5_library:*:*:*:*:*:*:*:*
History

No history.

Information

Published : 2022-09-01 18:15

Updated : 2024-11-21 06:31

NVD link : CVE-2021-45027

Mitre link : CVE-2021-45027

CVE.ORG link : CVE-2021-45027

JSON object : View

Products Affected

softlinkint

  • oliver_v5_library
CWE
CWE-494

Download of Code Without Integrity Check