CVE-2021-27341: OS4ED Opensis

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

OpenSIS Community Edition version <= 7.6 is affected by a local file inclusion vulnerability in DownloadWindow.php via the "filename" parameter.

Affected products

• OS4ED Opensis: up to and including 7.6

Published 2021-09-16. Last modified 2026-06-17.