CVE-2021-45027: High severity softlink oliver v5 library vulnerability
An arbitrary file download vulnerability in Oliver v5 Library Server Versions < 5.00.008.053 via the FileServlet function allows for arbitrary file download by an attacker using unsanitized user supplied input.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-45027?
CVE-2021-45027 is classified as a high severity vulnerability due to its ability to allow arbitrary file downloads by an attacker.
How do I fix CVE-2021-45027?
To fix CVE-2021-45027, it is recommended to upgrade to Oliver v5 Library version 5.00.008.053 or later.
What causes CVE-2021-45027?
CVE-2021-45027 is caused by unsanitized user input that allows attackers to exploit the FileServlet function for arbitrary file downloads.
Which versions of Oliver v5 Library are affected by CVE-2021-45027?
CVE-2021-45027 affects all versions of Oliver v5 Library below version 5.00.008.053.
What is the impact of exploiting CVE-2021-45027?
Exploiting CVE-2021-45027 can lead to unauthorized access to sensitive files on the server, potentially compromising data integrity and confidentiality.