CVE-2021-42261

7.5 HIGH

Revisor Video Management System (VMS) before 2.0.0 has a directory traversal vulnerability

Published: 2021-10-19 · Last updated: 2026-06-17

Severity and scoring

CVSS: 7.5 HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE: CWE-22

Affected products

Vendor	Product
revisorlab	video_management_system

Description

Revisor Video Management System (VMS) before 2.0.0 has a directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file system to access files or directories that are outside of restricted directory on the remote server. This could lead to the disclosure of sensitive data on the vulnerable server.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2021-42261
[Other]https://github.com/jet-pentest/CVE-2021-42261
[Vendor advisory]https://revisorlab.com/
[Other]https://github.com/jet-pentest/CVE-2021-42261
[Vendor advisory]https://revisorlab.com/

Related CVEs

Same CWE

CVE-2026-48777 — FileBrowser Quantum is a free, self-hosted, web-based file manager
CVE-2026-8442 — The WP Review Slider Pro plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 12.6.8 (8.1 HIGH)
CVE-2026-49766 — Subscriber Arbitrary File Deletion in WP User Manager <= 2.9.16 versions (9.9 CRITICAL)
CVE-2026-49061 — Unauthenticated Arbitrary File Download in WPC Product Options for WooCommerce <= 3.2.1 versions (7.5 HIGH)
CVE-2026-40779 — Contributor Arbitrary File Deletion in Link Library <= 7.8.8 versions (7.7 HIGH)