CVE-2021-47724: Stvs Provision

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

STVS ProVision 5.9.10 contains a path traversal vulnerability that allows authenticated attackers to access arbitrary files by manipulating the files parameter in the archive download functionality. Attackers can send GET requests to /archive/download with directory traversal sequences to read sensitive system files like /etc/passwd.

Affected products

• Stvs Provision: version 5.5 only; version 5.6 only; version 5.7 only; version 5.8.6 only; version 5.9.0 only; version 5.9.1 only; …

Published 2025-12-09. Last modified 2026-06-17.