CVSS v3
9.1
CRITICAL
EPSS Score
32.3%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
A directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote unauthenticated attackers to delete arbitrary files on the ResourceSpace server via the provider and variant parameters in pages/ajax/tiles.php. Attackers can delete configuration or source code files, causing the application to become unavailable to all users.
A directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote unauthenticated attackers to delete arbitrary files on the ResourceSpace server via the provider and variant parameters in pages/ajax/tiles.php. Attackers can delete configuration or source code files, causing the application to become unavailable to all users.
Active exploitation of CVE-2021-41950 has not been confirmed. The EPSS score is 32.3%, indicating the estimated probability of exploitation in the next 30 days.
CVE-2021-41950 has a CVSS v3 base score of 9.1 (CRITICAL severity).
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
Ranked by exploit probability (EPSS).