CVE-2021-40371

CRITICO 9.8CVE-2021-40371 · Published 25/10/2021 · updated 17/06/2026

In breve

CVE-2021-40371 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda request management (gridprosoftware).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 7.1%, superiore al 94.3% delle vulnerabilità.
Correzione: aggiornare a 2.0.7912 o successiva.

Package	Affected versions	Patched versions
request management gridprosoftware	`< 2.0.7912`	`2.0.7912`

Description

Gridpro Request Management for Windows Azure Pack before 2.0.7912 allows Directory Traversal for remote code execution, as demonstrated by ..\\ in a scriptName JSON value to ServiceManagerTenant/GetVisibilityMap.

References

packetstormsecurity.com/files/164621/GridPro-Request-Management-For-Windows-Azure-Pack-2.0.7905-Directory-Traversal.html · Exploit
seclists.org/fulldisclosure/2021/Oct/33 · Exploit
gridprosoftware.com/products/requestmanagement · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free