CVE-2021-44977: Path Traversal
Published Feb 4, 2022
·Updated
In iCMS <=8.0.0, a directory traversal vulnerability allows an attacker to read arbitrary files.
Affected Software
1 affected component
idreamsoft iCMS<=8.0.0
Event History
Feb 4, 2022
CVE Published
via MITRE·03:35 PM
Data Sourced
via MITRE·03:35 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for the iCMS directory traversal vulnerability?
The vulnerability ID for the iCMS directory traversal vulnerability is CVE-2021-44977.
2
What is the severity of CVE-2021-44977?
The severity of CVE-2021-44977 is high with a CVSS score of 7.5.
3
What is the affected software for CVE-2021-44977?
The affected software for CVE-2021-44977 is iCMS <=8.0.0.
4
How does the directory traversal vulnerability in iCMS <=8.0.0 work?
The directory traversal vulnerability in iCMS <=8.0.0 allows an attacker to read arbitrary files by bypassing directory restrictions and accessing files outside of the intended directory.
5
Is there a fix available for CVE-2021-44977?
At the moment, there is no official fix available for CVE-2021-44977. It is recommended to update to a patched version when it becomes available or apply any suggested mitigations.