Vulnerabilities > Leostream > Connection Broker > 9.0.40.17

DATE CVE VULNERABILITY TITLE RISK
2022-01-18 CVE-2021-41550 Unrestricted Upload of File with Dangerous Type vulnerability in Leostream Connection Broker 9.0.40.17
Leostream Connection Broker 9.0.40.17 allows administrator to upload and execute Perl code.
network
low complexity
leostream CWE-434
6.5
2022-01-18 CVE-2021-41551 Link Following vulnerability in Leostream Connection Broker 9.0.40.17
Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link.
network
low complexity
leostream CWE-59
4.0