CVE-2021-48017: OrbiTeam BSCW Server < 5.2.5 / 7.4.4 Path Traversal via bscw.cgi
OrbiTeam BSCW Server 5.x before 5.2.5 and 7.x before 7.4.4 contains an unauthenticated path traversal vulnerability in the stylename parameter of the theme operation. Attackers can send GET requests to /pub/bscw.cgi/<id>?op=theme with ../ sequences in stylename to read local files such as /etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-22.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
OrbiTeam BSCW Server 5.x releases before 5.2.5 and 7.x releases before 7.4.4 are affected. Updating to at least the corresponding fixed release is required.
What does an attacker need to exploit this issue?
An attacker needs network access to send a GET request to the bscw.cgi theme operation. No authentication or user interaction is required.
Has exploitation been observed in the wild?
Yes. The Shadowserver Foundation first observed exploitation evidence on 2023-10-22.