CVE-2021-43264

2021-11-0221:55:22

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.0%

JSON

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adjusting the path component for the page help file allows attackers to bypass the intended access control for HTML files via directory traversal. It replaces the - character with the / character.