What’s Vulnerable › Vulnerabilities

CVE-2021-45027

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-09-01 · updated 2026-06-17
• Weakness: CWE-494

Description

An arbitrary file download vulnerability in Oliver v5 Library Server Versions < 5.00.008.053 via the FileServlet function allows for arbitrary file download by an attacker using unsanitized user supplied input.

Affected products

• Softlink Education Oliver Library Server: before 8.00.008.053 — fixed in 8.00.008.053

How to fix

Upgrade to a fixed version: Softlink Education Oliver Library Server 8.00.008.053. Check the vendor advisory for mitigations.

References

• https://www.exploit-db.com/exploits/50599
• https://www.softlinkint.com/product/oliver/
• https://www.exploit-db.com/exploits/50599
• https://www.softlinkint.com/product/oliver/

Get alerted when CVE-2021-45027 or the next vulnerability affects your stack