CVE-2021-47724

MEDIUM 6.5CVE-2021-47724 · Published 09/12/2025 · updated 17/06/2026

In short

CVE-2021-47724 is a MEDIUM (CVSS 6.5) vulnerability affecting provision (stvs).
Chance of exploitation in the next 30 days (EPSS): 0.77%, higher than 55.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
provision stvs	`= 5.5= 5.6= 5.7= 5.8.6= 5.9.0= 5.9.1= 5.9.10= 5.9.7= 5.9.9`	No fix yet

Description

STVS ProVision 5.9.10 contains a path traversal vulnerability that allows authenticated attackers to access arbitrary files by manipulating the files parameter in the archive download functionality. Attackers can send GET requests to /archive/download with directory traversal sequences to read sensitive system files like /etc/passwd.

References

stvs.ch · Not Applicable
exploit-db.com/exploits/49481 · Exploit
vulncheck.com/advisories/stvs-provision-authenticated-file-disclosure-via-archiverb · Third Party Advisory
zeroscience.mk/en/vulnerabilities/ZSL-2021-5623.php · Third Party Advisory

More vulnerabilities in provision

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free