CVE-2021-47755

8.7 highEPSS 0.8%

High (8.7) in softlinkint oliver v5 library. EPSS 0.8% chance of exploitation in the next 30 days.

Oliver Library Server v5 contains a file download vulnerability that allows unauthenticated attackers to access arbitrary system files through unsanitized input in the FileServlet endpoint. Attackers can exploit the vulnerability by manipulating the 'fileName' parameter to download sensitive files from the server's filesystem.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2026-01-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

softlinkint:oliver_v5_library

References

https://www.exploit-db.com/exploits/50599
https://www.softlinkint.com/product/oliver/
https://www.exploit-db.com/exploits/50599

Check your stack JSON