CVE-2021-41551

2022-01-1814:45:57

mitre

www.cve.org

leostream connection broker

directory traversal

symbolic link

zip upload

cve-2021-41551

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

25.8%

JSON

Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link.

References

leostream.com/wp-content/uploads/2018/11/Leostream_release_notes.pdf

www.leostream.com/resource/leostream-connection-broker-9-0/