PT-2026-3167 · Geovision · Geowebserver
CVE-2021-47795
·
Publicado
2026-01-15
·
Atualizado
2026-01-16
CVSS v3.1
6.2
Média
| Vetor | AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
GeoVision GeoWebServer version 5.3.3
Description
GeoVision GeoWebServer 5.3.3 has multiple security issues, including local file inclusion, cross-site scripting, and remote code execution. These issues are due to improper input sanitization. An attacker can exploit the
WebStrings.srf API endpoint by manipulating path traversal and injection parameters. This allows access to system files and execution of malicious scripts.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
RCE
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Geowebserver