What is CVE-2021-47899?

CVE-2021-47899 is a medium-severity vulnerability in Mfscripts Yetishare File Hosting Script, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 4.0/10. Published 2026-01-23.

How severe is CVE-2021-47899?

Medium severity. CVSS v3 base score is 4.0 out of 10.

Arbitrary file upload in Mfscripts Yetishare File Hosting Script

CVE-2021-47899

YetiShare File Hosting Script 5.1.0 contains a server-side request forgery vulnerability that allows attackers to read local system files through the remote file upload feature. Attackers can exploit the url parameter in the url_upload_handler endpoint to access sensitive files like /etc/passwd by using file:/// protocol.

Vulnerability class: Unrestricted File Upload

EPSS: 0.003 (17.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.0 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Mfscripts Yetishare File Hosting Script — versions v5.1.0

Weakness classification (CWE)

CWE-434 — Unrestricted Upload of File with Dangerous Type

References

disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2021-47899?: CVE-2021-47899 is a medium-severity vulnerability in Mfscripts Yetishare File Hosting Script, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 4.0/10. Published 2026-01-23.
How severe is CVE-2021-47899?: Medium severity. CVSS v3 base score is 4.0 out of 10.