{"id":"CVE-2021-47795","state":"PUBLISHED","title":"GeoVision Geowebserver 5.3.3 - Local FIle Inclusion","description":"GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access system files and execute malicious scripts.","publishedAt":"2026-01-15T23:25:44.158Z","updatedAt":"2026-04-07T14:06:12.212Z","severity":{"score":8.7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Geovision GeoVision Geowebserver"],"affected":[{"vendor":"Geovision","product":"GeoVision Geowebserver","versions":[{"version":"<= 5.3.3","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/50211","https://www.geovision.com.tw/cyber_security.php","https://www.vulncheck.com/advisories/geovision-geowebserver-local-file-inclusion"],"weaknesses":["CWE-22"],"ingestedAt":"2026-10-29T19:49:19.404Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/47xxx/CVE-2021-47795.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2021-47795","state":"PUBLISHED","datePublished":"2026-01-15T23:25:44.158Z","dateUpdated":"2026-04-07T14:06:12.212Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-01-14T14:39:44.739Z"},"containers":{"cna":{"title":"GeoVision Geowebserver 5.3.3 - Local FIle Inclusion","descriptions":[{"lang":"en","value":"GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access system files and execute malicious scripts."}],"affected":[{"vendor":"Geovision","product":"GeoVision Geowebserver","versions":[{"version":"<= 5.3.3","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/50211","name":"ExploitDB-50211","tags":["exploit"]},{"url":"https://www.geovision.com.tw/cyber_security.php","name":"GeoVision Cyber Security Page","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/geovision-geowebserver-local-file-inclusion","name":"VulnCheck Advisory: GeoVision Geowebserver 5.3.3 - Local FIle Inclusion","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.7,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":6.2,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","lang":"en","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-04-07T14:06:12.212Z"},"credits":[{"lang":"en","value":"Ken 's1ngular1ty' Pyle","type":"finder"}],"x_generator":{"engine":"vulncheck"},"datePublic":"2021-08-17T00:00:00.000Z"},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-01-16T16:07:12.459055Z","id":"CVE-2021-47795","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-01-16T16:07:18.918Z"}}]}}}