Every CVE Search/ Get API key

CVE-2001-0973

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary...

6.4 Medium

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space.

Exploit likelihood

2.02%Up 0.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.4

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space.

Record
CVE-2001-0973
CVSS 2.0
6.4 MediumAV:N/AC:L/Au:N/C:P/I:P/A:N
Updated
2026-11-02
CVE List No score

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space.

Record
CVE-2001-0973
Updated
2026-11-02
EUVDEUVD-2001-0955 No score

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space.

Record
EUVD-2001-0955
Updated
2026-11-03
GitHub AdvisoriesGHSA-mr5j-qcjf-p9xm No score

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary...

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space.

Record
GHSA-mr5j-qcjf-p9xm
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-0973 is a medium vulnerability (CVSS 6.4) in Fraunhofer Fit Bscw, published August 31, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.02%, the 81st percentile. No source names a fixed version.

References

MoveEnter Open