CVE-2021-45027
HIGH NUCLEISoftlinkint Oliver V5 Library - Download Without Integrity Check
Title source: ruleDescription
An arbitrary file download vulnerability in Oliver v5 Library Server Versions < 5.00.008.053 via the FileServlet function allows for arbitrary file download by an attacker using unsanitized user supplied input.
Exploits (1)
exploitdb
WORKING POC
by Mandeep Singh · textremotewindows
https://www.exploit-db.com/exploits/50599
Nuclei Templates (1)
Oliver 5 Library Server <8.00.008.053 - Local File Inclusion
HIGHVERIFIEDby gy741
Scores
CVSS v3
7.5
EPSS
0.1735
EPSS Percentile
95.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-494
Status
published
Products (1)
softlinkint/oliver_v5_library
< 8.00.008.053
Published
Sep 01, 2022
Tracked Since
Feb 18, 2026