ByteOS Network

NVD Vulnerability Details :

CVE-2021-47921

Awaiting Analysis

Source-disclosure@vulncheck.com

Published At-01 Feb, 2026 | 13:15

Updated At-03 Feb, 2026 | 17:15

Free Photo & Video Vault 0.0.2 contains a directory traversal web vulnerability that allows remote attackers to manipulate application path requests and access sensitive system files. Attackers can exploit the vulnerability without privileges to retrieve environment variables and access unauthorized system paths.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	7.1	HIGH	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Secondary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Type: Secondary

Version: 4.0

Base score: 7.1

Base severity: HIGH

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Secondary

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE ID	Type	Source
CWE-22	Secondary	disclosure@vulncheck.com

CWE ID: CWE-22

Type: Secondary

Source: disclosure@vulncheck.com

References

Hyperlink	Source	Resource
https://apps.apple.com/us/app/free-photo-video-vault-wifi-transfer/id981034501	disclosure@vulncheck.com	N/A
https://www.vulncheck.com/advisories/free-photo-video-vault-directory-traversal-vulnerability-via-web-request	disclosure@vulncheck.com	N/A
https://www.vulnerability-lab.com/get_content.php?id=2271	disclosure@vulncheck.com	N/A
https://www.vulnerability-lab.com/get_content.php?id=2271	134c704f-9b21-4f2e-91b3-4a467353bcc0	N/A