Skip to content
OpenAdvisories

Product · Shenzhen Longjing Technology

BEMS API

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2021-4463 Scanner template

    Longjing Technology BEMS API <= 1.21 Remote Arbitrary File Download

    Longjing Technology BEMS API versions up to and including 1.21 contains an unauthenticated arbitrary file download vulnerability in the 'downloads' endpoint. The 'fileName' parameter is not properly sanitized, allowing attackers to craft traversal sequences a…

    Shenzhen Longjing Technology BEMS API