CVE-2021-47921CWE-22

Free Photo & Video Vault 0.0.2 Directory Traversal Vulnerability via Web Request

High · published February 1, 2026

CVSS v4.0
7.1
EPSS
1%
Percentile
56.4
In the wild
Unconfirmed
What it is

Free Photo & Video Vault 0.0.2 contains a directory traversal web vulnerability that allows remote attackers to manipulate application path requests and access sensitive system files. Attackers can exploit the vulnerability without privileges to retrieve environment variables and access unauthorized system paths.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00806 · 56.4th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-02-01T12:56Z
EPSS history
Timeline
  • 01 FEB 12:56Z
    Free Photo & Video Vault 0.0.2 Directory Traversal Vulnerability via Web Request
    cvelistv5