CVE-2021-27341: Path Traversal
Published Sep 16, 2021
·Updated
OpenSIS Community Edition version <= 7.6 is affected by a local file inclusion vulnerability in DownloadWindow.php via the "filename" parameter.
Affected Software
1 affected component
OS4ED openSIS<=7.6
Remediation
Event History
Sep 16, 2021
CVE Published
via MITRE·01:47 PM
Data Sourced
via MITRE·01:47 PM
Description
Frequently Asked Questions
1
What is CVE-2021-27341?
CVE-2021-27341 is a local file inclusion vulnerability in OpenSIS Community Edition version <= 7.6.
2
How does CVE-2021-27341 impact OpenSIS Community Edition?
CVE-2021-27341 allows an attacker to include and execute arbitrary local files on the OpenSIS server.
3
What is the severity of CVE-2021-27341?
The severity of CVE-2021-27341 is critical, with a CVSS score of 9.8.
4
How can I fix the CVE-2021-27341 vulnerability?
To fix the CVE-2021-27341 vulnerability, upgrade OpenSIS Community Edition to a version higher than 7.6.
5
Where can I find more information about CVE-2021-27341?
Additional information about CVE-2021-27341 can be found on the OpenSIS Classic GitHub page.