H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2021-40870

Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.

Vulnerability
TypeVulnerability
External ID—
First seen2022-01-18
Last seen2022-01-18

Confidence

—

Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.

Labels

exploitedkev

CISA KEV context

Vendor / productAviatrix Aviatrix Controller
Added2022-01-18
Due date2022-02-01
6 recorded

Relationships

mitigates
from Remediate CVE-2021-40870
Mitigation
related-to
to AJAX Footprinting
Technique
related-to
to Leverage Executable Code in Non-Executable Files
Technique
related-to
to Manipulating User-Controlled Variables
Technique
related-to
to User-Controlled Filename
Technique
related-to
to Web Server Logs Tampering
Technique
3 external

References

nvd
CVE-2021-40870
open
cwe
CWE-25
open
cwe
CWE-96
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance