CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. Its EPSS score suggests a 74.9% probability of exploitation in the next 30 days. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2021-41950
Severity
CRITICAL
CVSS
9.1
EPSS
74.86%
Original NVD Description
A directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote unauthenticated attackers to delete arbitrary files on the ResourceSpace server via the provider and variant parameters in pages/ajax/tiles.php. Attackers can delete configuration or source code files, causing the application to become unavailable to all users.
Related CVEs
Other vulnerabilities affecting the same vendor(s)