Vulnerability · Published Sep 23, 2021 · Assigned by mitre
CVE-2021-41381
High 7.5
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 52.9% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)52.9%top 1.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling2Nuclei, Public PoC
Official description
Payara Micro Community 5.2021.6 and below allows Directory Traversal.
Affected products (as reported)
References
- https://www.payara.fish
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-054.txt
- http://packetstormsecurity.com/files/164365/Payara-Micro-Community-5.2021.6-Directory-Traversal.html
- https://github.com/Net-hunter121/CVE-2021-41381/blob/main/CVE:%202021-41381-POC
- https://www.exploit-db.com/exploits/50371
- 20221115 SEC Consult SA-20221114-0 :: Path Traversal Vulnerability in Payara Platform mailing-list
- http://packetstormsecurity.com/files/169864/Payara-Platform-Path-Traversal.html