OrbiTeam CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH OrbiTeam CVE published 2026-10-22

CVE-2021-48017

OrbiTeam BSCW Server 5.x before 5.2.5 and 7.x before 7.4.4 contains an unauthenticated path traversal vulnerability in the style_name parameter of the theme operation. The vulnerability allows attackers to read local files. Defenders should prioritize verifying exposure and assessing the feasibility of path traversal attacks. The CVE record was published on 2026-10-22T10:57:31.855Z and has not been modifi [truncated]