CVE-2021-41551

MEDIUM

Leostream Connection Broker 9.0.40.17 - Directory Traversal via ZIP File Symbolic Link

Title source: llm
STIX 2.1

Description

Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link.

References (2)

Core 2
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://www.leostream.com/resource/leostream-connection-broker-9-0/

Scores

CVSS v3 4.9
EPSS 0.0127
EPSS Percentile 66.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-59
Status published
Products (1)
leostream/connection_broker 9.0.40.17
Published Jan 18, 2022
Tracked Since Feb 18, 2026