Lucene search
K

CVE-2021-29641

🗓️ 07 Apr 2021 21:31:45Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 65 Views🌐 WEB

Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary cod

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
Monospace Directus Headless CMS File Upload / Rule Bypass Vulnerabilities
7 Apr 202100:00
zdt
CNNVD
Directusv8 代码问题漏洞
7 Apr 202100:00
cnnvd
CNVD
Directusv8 Code Issues Vulnerabilities
9 Apr 202100:00
cnvd
Cvelist
CVE-2021-29641
7 Apr 202121:31
cvelist
EUVD
EUVD-2021-16117
7 Oct 202500:30
euvd
NVD
CVE-2021-29641
7 Apr 202122:15
nvd
OSV
CVE-2021-29641
7 Apr 202122:15
osv
Packet Storm
Monospace Directus Headless CMS File Upload / Rule Bypass
7 Apr 202100:00
packetstorm
Prion
Design/Logic Flaw
7 Apr 202122:15
prion
RedhatCVE
CVE-2021-29641
22 May 202519:36
redhatcve
Rows per page
NVD
Node
rangerstudiodirectusRange8.0.08.8.2
ParameterPositionPathDescriptionCWE
file'],'description':'Arbitrary PHP file upload leading to potential code execution via uploads/_/originals path in Directus 8 on Apache docker image with local-storage driver (CVE-2021-29641)','cwe':['CWE-434']},{request body/uploads/_/originals/test/file.php

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 06:01Current
8.8High risk
Vulners AI Score8.8
CVSS 26.5
CVSS 3.18.8
EPSS0.06595
65