CVE-2021-42052

7.5 highEPSS 1.1%

High (7.5) in ipesa e-flow. EPSS 1.1% chance of exploitation in the next 30 days.

IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEResource.res path and the R query parameter.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2022-08-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ipesa:e-flow

References

https://nxnjz.net/2022/08/cve-2021-42052-full-disclosure/
https://nxnjz.net/2022/08/cve-2021-42052-full-disclosure/

Check your stack JSON