Vulnerabilities > CVE-2021-39271 - Unspecified vulnerability in Bscw Classic

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
bscw
NVD
Published: 2021-08-30
Updated: 2024-11-21

Summary

OrbiTeam BSCW Classic before 7.4.3 allows authenticated remote code execution (RCE) during archive extraction via attacker-supplied Python code in the class attribute of a .bscw file. This is fixed in 5.0.12, 5.1.10, 5.2.4, 7.3.3, and 7.4.3.

Vulnerable Configurations

Part Description Count
Application
Bscw
5

References