CVE-2021-39271

· HIGHModified

← All CVEs

CVSS v3.1

8.8

EPSS

3.68%

Published

Aug 30, 2021

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

OrbiTeam BSCW Classic before 7.4.3 allows authenticated remote code execution (RCE) during archive extraction via attacker-supplied Python code in the class attribute of a .bscw file. This is fixed in 5.0.12, 5.1.10, 5.2.4, 7.3.3, and 7.4.3.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products (5)

bscw · bscw_classic (up to 5.0.12)vulnerable

bscw · bscw_classic (up to 5.1.10)vulnerable

bscw · bscw_classic (up to 5.2.4)vulnerable

bscw · bscw_classic (up to 7.3.3)vulnerable

bscw · bscw_classic (up to 7.4.3)vulnerable

References (6)

http://packetstormsecurity.com/files/163989/BSCW-Server-Remote-Code-Execution.html

ExploitMailing ListThird Party Advisory

https://seclists.org/fulldisclosure/2021/Aug/24

ExploitMailing ListThird Party Advisory

https://www.bscw.de/en/company/

Vendor Advisory

http://packetstormsecurity.com/files/163989/BSCW-Server-Remote-Code-Execution.html

ExploitMailing ListThird Party Advisory

https://seclists.org/fulldisclosure/2021/Aug/24

ExploitMailing ListThird Party Advisory

https://www.bscw.de/en/company/

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs