CVE-2021-40870

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-01-18

Reference

https://nvd.nist.gov/vuln/detail/CVE-2021-40870

⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.

Players implicated

Aviatrix · vendor Aviatrix Controller · product

Description

Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.