What’s Vulnerable › Vulnerabilities

CVE-2021-47921: Free Photo & Video Vault 0.0.2 Directory Traversal Vulnerability via Web Request

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-01 · updated 2026-06-17
• Weakness: CWE-22

Description

Free Photo & Video Vault 0.0.2 contains a directory traversal web vulnerability that allows remote attackers to manipulate application path requests and access sensitive system files. Attackers can exploit the vulnerability without privileges to retrieve environment variables and access unauthorized system paths.

Affected products

• Author: Scott Ferreira Free Photo & Video Vault - WiFi Transfe‪r: 0.0.2

References

• https://apps.apple.com/us/app/free-photo-video-vault-wifi-transfer/id981034501
• https://www.vulncheck.com/advisories/free-photo-video-vault-directory-traversal-vulnerability-via-web-request
• https://www.vulnerability-lab.com/get_content.php?id=2271
• https://www.vulnerability-lab.com/get_content.php?id=2271

Get alerted when CVE-2021-47921 or the next vulnerability affects your stack