Vulnerability in N/a
CVE-2021-41381
Payara Micro Community 5.2021.6 and below allows Directory Traversal.
EPSS: 0.843 (99.3th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- www.payara.fish
- www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-054.txt
- packetstormsecurity.com/files/164365/Payara-Micro-Community-5.2021.6-Directory-…
- github.com/Net-hunter121/CVE-2021-41381/blob/main/CVE: 2021-41381-POC
- www.exploit-db.com/exploits/50371
- 20221115 SEC Consult SA-20221114-0 :: Path Traversal Vulnerability in Payara Platform (mailing-list)
- packetstormsecurity.com/files/169864/Payara-Platform-Path-Traversal.html
Frequently asked questions
- What is CVE-2021-41381?
- CVE-2021-41381 is a vulnerability in N/a. Published 2021-09-23.
- Is CVE-2021-41381 known to be exploited?
- 20 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.