~/products/shenzhen_longjing_technology_co_ltd/bems_api

pipeline liveDigest Docs

Shenzhen Longjing Technology Co Ltd Bems Api vulnerabilities

1 known vulnerability affecting shenzhen_longjing_technology_co_ltd/bems_api.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

SortPage 1 of 1

CVE-2021-4463P2HIGHCVSS 8.7PoC≤ 1.212025-11-12

CVE-2021-4463 [HIGH] CWE-22 CVE-2021-4463: Longjing Technology BEMS API versions up to and including 1.21 contains an unauthenticated arbitrary Longjing Technology BEMS API versions up to and including 1.21 contains an unauthenticated arbitrary file download vulnerability in the 'downloads' endpoint. The 'fileName' parameter is not properly sanitized, allowing attackers to craft traversal sequences and access sensitive files outside the intended directory.

Shenzhen Longjing Technology Co Ltd Bems Api vulnerabilities | cvebase