by Kastro
Paper/Archive/CVE-2021-26619

CVE-2021-26619

Bluetree Co., Ltd BigFileAgent — BigFileAgent arbitrary file Deleting vulnerability

EPSS 0.9%CVSS 9.1
critical.is priorityof 100
39
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 59.8.598 × 2012.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An path traversal vulnerability leading to delete arbitrary files was discovered in BigFileAgent. Remote attackers can use this vulnerability to delete arbitrary files of unspecified number of users.

Affected

ProductAffectedFixed inSource
BigFileAgentunspecified – 1.0.1.7–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
krcert (CNA)7.1CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

References

refkrcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36457