CVE-2021-40371

PoC ×2—

CVSS 3.1

9.8 critical

EPSS

7%p94

Published

Oct 25, 2021 (Oct 25, 2021)

Modified

Jun 17, 2026

Description

Gridpro Request Management for Windows Azure Pack before 2.0.7912 allows Directory Traversal for remote code execution, as demonstrated by ..\\ in a scriptName JSON value to ServiceManagerTenant/GetVisibilityMap.

Vendors: gridprosoftware
Products: request management
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (7.1%)

In the news0 stories

No ingested article mentions this CVE yet.