STVS ProVision Authenticated File Disclosure via archive.rb
Priority HIGH 70CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.
Summary
STVS ProVision 5.9.10 contains a path traversal vulnerability that allows authenticated attackers to access arbitrary files by manipulating the files parameter in the archive download functionality. Attackers can send GET requests to /archive/download with directory traversal sequences to read sensitive system files like /etc/passwd.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00769 55th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| STVS SA | STVS ProVision | 5.9.10 (build 2885-3a8219a) | — | No fix listed | CNA |
- STVS ProVision VendorSTVS SA Affected 5.9.10 (build 2885-3a8219a) Fixed in — No fix listed CNA
CPE configurations NVD · 9
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:stvs:provision:5.5:*:*:*:*:*:*:* | 5.5 | Vulnerable | STVS SA |
| cpe:2.3:a:stvs:provision:5.6:*:*:*:*:*:*:* | 5.6 | Vulnerable | STVS SA |
| cpe:2.3:a:stvs:provision:5.7:*:*:*:*:*:*:* | 5.7 | Vulnerable | STVS SA |
| cpe:2.3:a:stvs:provision:5.8.6:*:*:*:*:*:*:* | 5.8.6 | Vulnerable | STVS SA |
| cpe:2.3:a:stvs:provision:5.9.0:*:*:*:*:*:*:* | 5.9.0 | Vulnerable | STVS SA |
| cpe:2.3:a:stvs:provision:5.9.1:*:*:*:*:*:*:* | 5.9.1 | Vulnerable | STVS SA |
| cpe:2.3:a:stvs:provision:5.9.7:*:*:*:*:*:*:* | 5.9.7 | Vulnerable | STVS SA |
| cpe:2.3:a:stvs:provision:5.9.9:*:*:*:*:*:*:* | 5.9.9 | Vulnerable | STVS SA |
| cpe:2.3:a:stvs:provision:5.9.10:*:*:*:*:*:*:* | 5.9.10 | Vulnerable | STVS SA |
- cpe:2.3:a:stvs:provision:5.5:*:*:*:*:*:*:* Versions 5.5 Vulnerable ·STVS SA
- cpe:2.3:a:stvs:provision:5.6:*:*:*:*:*:*:* Versions 5.6 Vulnerable ·STVS SA
- cpe:2.3:a:stvs:provision:5.7:*:*:*:*:*:*:* Versions 5.7 Vulnerable ·STVS SA
- cpe:2.3:a:stvs:provision:5.8.6:*:*:*:*:*:*:* Versions 5.8.6 Vulnerable ·STVS SA
- cpe:2.3:a:stvs:provision:5.9.0:*:*:*:*:*:*:* Versions 5.9.0 Vulnerable ·STVS SA
- cpe:2.3:a:stvs:provision:5.9.1:*:*:*:*:*:*:* Versions 5.9.1 Vulnerable ·STVS SA
- cpe:2.3:a:stvs:provision:5.9.7:*:*:*:*:*:*:* Versions 5.9.7 Vulnerable ·STVS SA
- cpe:2.3:a:stvs:provision:5.9.9:*:*:*:*:*:*:* Versions 5.9.9 Vulnerable ·STVS SA
- cpe:2.3:a:stvs:provision:5.9.10:*:*:*:*:*:*:* Versions 5.9.10 Vulnerable ·STVS SA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-47724
- 2026-10-03 Alias added: GHSA-5wfc-7v23-c2vf
References
Exploit 1
More STVS SA Provision vulnerabilities
- TI-2021-22340 STVS ProVision Cross-Site Request Forgery (Add Admin) CVSS 4.0MEDIUM 6.9
Sources
- CVE-2021-47724 · CVE Program
- CVE-2021-47724 · NVD
- FIRST EPSS
- GHSA-5wfc-7v23-c2vf · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences