Vulnerability · Published Jul 12, 2021 · Assigned by mitre
CVE-2021-33807
High 7.5
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 16.1% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)16.1%top 3.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Nuclei
Official description
Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData.
Affected products (as reported)
References
- https://www.cartadis.com/gespage-website/ x_refsource_MISC
- https://www.gespage.com x_refsource_MISC
- https://support.gespage.com/fr/support/solutions/articles/14000130201-security-advisory-gespage-directory-traversal x_refsource_CONFIRM
- https://www.on-x.com/sites/default/files/on-x_-_security_advisory_-_gespage_-_cve-2021-33807.pdf x_refsource_MISC