CVE-2021-47795: GeoVision Geowebserver 5.3.3 - Local FIle Inclusion
GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access system files and execute malicious scripts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47795?
CVE-2021-47795 is marked as critical due to its potential for local file inclusion and remote code execution.
How do I fix CVE-2021-47795?
To mitigate CVE-2021-47795, update GeoVision GeoWebServer to the latest version that includes security patches.
What vulnerabilities are associated with CVE-2021-47795?
CVE-2021-47795 includes vulnerabilities like local file inclusion, cross-site scripting, and remote code execution.
What is the impact of exploiting CVE-2021-47795?
Exploiting CVE-2021-47795 could allow an attacker to gain unauthorized access to files and execute malicious code.
Which version of GeoVision is affected by CVE-2021-47795?
CVE-2021-47795 affects GeoVision GeoWebServer version 5.3.3.