Vulnerability · Published Jan 15, 2026 · Assigned by VulnCheck

CVE-2021-47795GeoVision Geowebserver 5.3.3 - Local FIle Inclusion

Medium 6.2

In plain English

A medium-severity path traversal in GeoVision Geowebserver from Geovision. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.8% (higher than 87% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.

Severity (CVSS 3.1)6.2Medium

Exploit odds (30 days)2.8%top 13.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Nuclei

Official description

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access system files and execute malicious scripts.

Affected products (as reported)

Vendor	Product	Versions
Geovision	GeoVision Geowebserver	<= 5.3.3

Weakness: CWE-22 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

ExploitDB-50211 exploit
GeoVision Cyber Security Page product
VulnCheck Advisory: GeoVision Geowebserver 5.3.3 - Local FIle Inclusion third-party-advisory