All vulnerabilities
CVE-2021-48017

OrbiTeam BSCW Server < 5.2.5 / 7.4.4 Path Traversal via bscw.cgi

OrbiTeam BSCW Server
Open in ThreatlineRecord JSON
CVSS
8.7High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.43%Chance of exploitation activity in the next 30 days, higher than 36% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in5.2.5Also 7.4.4CVE List
Published22 Oct 2026Updated 22 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

OrbiTeam BSCW Server 5.x before 5.2.5 and 7.x before 7.4.4 contains an unauthenticated path traversal vulnerability in the style_name parameter of the theme operation. Attackers can send GET requests to /pub/bscw.cgi/<id>?op=theme with ../ sequences in style_name to read local files such as /etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-22.

Text from CVE List

Affected versions 2

  • BSCW Serveraffected: 5.0.0 before 5.2.5CVE List
  • BSCW Serveraffected: 7.0.0 before 7.4.4CVE List

References 4