CVE-2021-33576

An issue was discovered in Cleo LexiCom 5.5.0.0. Within the AS2 message, the sender can specify a filename. This filename can include path-traversal characters, allowing the file to be written to an arbitrary location on disk...

CVE-2021-33576

creationtimestamp| type| source ---|---|--- 2021-06-18 14:41:54+00:00| seen| https://t.me/cibsecurity/25545...

CVE-2021-33576

An issue was discovered in Cleo LexiCom 5.5.0.0. Within the AS2 message, the sender can specify a filename. This filename can include path-traversal characters, allowing the file to be written to an arbitrary location on disk...

CVE-2021-33576

CVE-2021-33576 affects Cleo LexiCom 5.5.0.0. The root cause is that an AS2 message can carry a filename containing path-traversal characters, enabling the attacker to write files to arbitrary locations on disk. The issue is documented across multiple sources (NVD, Red Hat, CVE lists). According t...