CNNVD-202512-1112 Information
Dec 09, 2025
cve
CNNVD ID
CNNVD-202512-1112
Related CVE
- CNNVD Published: 2025-12-09
Description (Chinese)
STVS ProVision是美国STVS公司的一款先进视频管理系统。 STVS ProVision 5.9.10版本存在路径遍历漏洞，该漏洞源于archive下载功能存在路径遍历问题，可能导致任意文件读取。
Description (English)
STVS ProVision is an advanced video management system of the United States company STVS. The version of STVS ProVision 5.9.10 has a loophole in its path, which stems from a problem with the archive download function, which may lead to any file being read.
Hazard Level
High
Vulnerability Type
路径遍历
Affected Vendor
STVS
Published
2025-12-09
Last Modified
2026-02-24
References
https://www.vulncheck.com/advisories/stvs-provision-authenticated-file-disclosure-via-archiverb https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5623.php https://www.exploit-db.com/exploits/49481 http://www.stvs.ch https://access.redhat.com/security/cve/cve-2021-47724
Share on: