Lucene search
HistorySep 01, 2022 - 6:15 p.m.
CVE-2021-45027
arbitrary file download
oliver v5
library server
unsanitized input
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.01 Low
EPSS
Percentile
83.8%
An arbitrary file download vulnerability in Oliver v5 Library Server Versions < 5.00.008.053 via the FileServlet function allows for arbitrary file download by an attacker using unsanitized user supplied input.
Affected configurations
Node
softlinkintoliver_v5_libraryRange<8.00.008.053
Related
cve
cve
CVE-2021-45027
2022-09-01 18:15:09
cvelist
cvelist
CVE-2021-45027
2022-09-01 17:47:24
prion
prion
Input validation
2022-09-01 18:15:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.01 Low
EPSS
Percentile
83.8%
Related for NVD:CVE-2021-45027