Skip to content
OpenAdvisories

Vendor

OrbiTeam

1 known vulnerabilities.

Products

BSCW Server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2021-48017

    OrbiTeam BSCW Server < 5.2.5 / 7.4.4 Path Traversal via bscw.cgi

    OrbiTeam BSCW Server 5.x before 5.2.5 and 7.x before 7.4.4 contains an unauthenticated path traversal vulnerability in the style_name parameter of the theme operation. Attackers can send GET requests to /pub/bscw.cgi/<id>?op=theme with ../ sequences in style_…

    OrbiTeam BSCW Server