CVE-2021-39271

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

OrbiTeam BSCW Classic before 7.4.3 allows authenticated remote code execution (RCE) during archive extraction via attacker-supplied Python code in the class attribute of a .bscw file. This is fixed in 5.0.12, 5.1.10, 5.2.4, 7.3.3, and 7.4.3.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/163989/BSCW-Server-Remote-Code-Execution.htmlExploit, Mailing List, Third Party Advisory
https://seclists.org/fulldisclosure/2021/Aug/24Exploit, Mailing List, Third Party Advisory
https://www.bscw.de/en/company/Vendor Advisory
http://packetstormsecurity.com/files/163989/BSCW-Server-Remote-Code-Execution.htmlExploit, Mailing List, Third Party Advisory
https://seclists.org/fulldisclosure/2021/Aug/24Exploit, Mailing List, Third Party Advisory
https://www.bscw.de/en/company/Vendor Advisory

Timeline

Published: Aug 30, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-392725.9Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUT CVE-2021-392738.8In XeroSecurity Sn1per 9.0 (free version), insecure permissions (0777) are set upon application execution, allowing an unprivileged user to CVE-2021-392749.8In XeroSecurity Sn1per 9.0 (free version), insecure directory permissions (0777) are set during installation, allowing an unprivileged user CVE-2021-392759.8ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functio CVE-2021-392786.1Certain MOXA devices allow reflected XSS via the Config Import menu. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-CVE-2021-392798.8Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.CVE-2021-39287.8vim is vulnerable to Use of Uninitialized Variable CVE-2021-392808.8Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1 CVE-2021-392827.5Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files.CVE-2021-392835.5liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands.CVE-2021-392856.1A XSS vulnerability exists in Versa Director Release: 16.1R2 Build: S8. An attacker can use the administration web interface URL to create a CVE-2021-392866.1Webrecorder pywb before 2.6.0 allows XSS because it does not ensure that Jinja2 templates are autoescaped.