Vulnerabilities > CVE-2021-38621 - Unspecified vulnerability in Netless Flat Server
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
NONE Summary
The remove API in v1/controller/cloudStorage/alibabaCloud/remove/index.ts in netless Agora Flat Server before 2021-07-30 mishandles file ownership.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |