CVE-2021-21501

High

Published: 10 August 2021

Published

10 August 2021

Modified

21 November 2024

KEV Added

—

Patch

—

CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score 0.0075 73.7th percentile

Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-21501 is a high-severity Path Traversal (CWE-22) vulnerability in Apache Servicecomb. Its CVSS base score is 7.5 (High).

Operationally, ranked in the top 26.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

Improper configuration will cause ServiceComb ServiceCenter Directory Traversal problem in ServcieCenter 1.x.x versions and fixed in 2.0.0.

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

apache

servicecomb

1.0.0 — 2.0.0

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-22

Validates pathnames and filenames to prevent traversal outside intended directories.