Oliver Library Server v5 contains a file download vulnerability that allows unauthenticated attackers to access arbitrary system files through unsanitized input in the FileServlet endpoint.
CVSS 4.0HIGH 8.7·Network·No auth·No interaction·EPSS 0.00818·Published 2026-01-15·Fixed in 8.00.008.053CWE-22
An arbitrary file download vulnerability in Oliver v5 Library Server Versions < 5.00.008.053 via the FileServlet function allows for arbitrary file download by an attacker using unsanitized user supplied input.