Lucene search
K

EUVD-2026-37942

🗓️ 18 Jun 2026 19:54:01Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 3 Views

OneDev before 15.0.7 allows symlink traversal via TarUtils.untar(), enabling writes to arbitrary server paths by authenticated CI users.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-49248
18 Jun 202619:54
attackerkb
Circl
CVE-2021-21251
16 Jan 202100:51
circl
CNNVD
Theonedev Onedev 路径遍历漏洞
15 Jan 202100:00
cnnvd
CNVD
Theonedev OneDev Directory Traversal Vulnerability
18 Jan 202100:00
cnvd
CVE
CVE-2021-21251
15 Jan 202120:10
cve
CVE
CVE-2026-49248
18 Jun 202619:54
cve
Cvelist
CVE-2021-21251 ZipSlip Arbitrary File Upload
15 Jan 202120:10
cvelist
Cvelist
CVE-2026-49248 OneDev: RCE through absolute-path symlink following allows low-privileged users to overwrite arbitrary server via TarUtils.untar
18 Jun 202619:54
cvelist
EUVD
EUVD-2021-8634
3 Oct 202520:07
euvd
NVD
CVE-2021-21251
15 Jan 202121:15
nvd
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "1a52158c-8754-3c34-8b87-75549bb17583",
        "vendor": {
          "name": "theonedev"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "09a97643-857c-313e-8d69-43ef334d32a0",
        "product": {
          "name": "onedev",
          "vendor": {
            "name": "theonedev"
          }
        },
        "product_version": "< 15.0.7"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

18 Jun 2026 19:54Current
7.9High risk
Vulners AI Score7.9
CVSS 48.3
CVSS 26.5
CVSS 3.17.7 - 8.8
EPSS0.28857
3