CVE-2021-42261 PoC — Revisor Video Management System 路径遍历漏洞

Description

CVE-2021-42261

介绍

# CVE-2021-42261

## [Suggested description]
Revisor Video Management System (VMS) before 2.0.0 has a directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file system to access files or directories that are outside of restricted directory on the remote server. This could lead to the disclosure of sensitive data on the vulnerable server.

## [Vulnerability Type]
Directory Traversal

## [Vendor of Product]
Revisor Lab

## [Affected Product Code Base]
Revisor VMS < 2.0.0

## [Affected Component]
Web-Server

## [Attack Type]
Remote

## [Has vendor confirmed or acknowledged the vulnerability?]
true

## [Impact Information Disclosure]
true

## [Reference]
https://revisorlab.com/

## [Discoverer]
Vladimir Rotanov (Jet Infosystems (jet.su), Moscow, Russia)

文件快照

备注