Mini Mouse 9.2.0 contains a path traversal vulnerability that allows remote attackers to access arbitrary system files and directories through crafted HTTP requests. Attackers can retrieve sensitive files like win.ini and list contents of system directories such as C:\Users\Public by manipulating file and path parameters.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Sat, 24 Jan 2026 01:45:00 +0900

Type Values Removed Values Added
First Time appeared Yodinfo
Yodinfo mini Mouse
Vendors & Products Yodinfo
Yodinfo mini Mouse

Fri, 23 Jan 2026 01:15:00 +0900

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 22 Jan 2026 02:45:00 +0900

Type Values Removed Values Added
Description Mini Mouse 9.2.0 contains a path traversal vulnerability that allows remote attackers to access arbitrary system files and directories through crafted HTTP requests. Attackers can retrieve sensitive files like win.ini and list contents of system directories such as C:\Users\Public by manipulating file and path parameters.
Title Mini Mouse 9.2.0 - Path Traversal
Weaknesses CWE-22
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-01-22T15:46:05.970Z

Reserved: 2026-01-14T17:11:19.903Z

Link: CVE-2021-47850

cve-icon Vulnrichment

Updated: 2026-01-22T15:46:02.705Z

cve-icon NVD

Status : Received

Published: 2026-01-21T18:16:14.237

Modified: 2026-01-21T18:16:14.237

Link: CVE-2021-47850

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-01-22T19:15:13Z

Weaknesses