CVE-2021-36701

2021-08-0319:15:08

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.3%

JSON

In htmly version 2.8.1, is vulnerable to an Arbitrary File Deletion on the local host when delete backup files. The vulnerability may allow a remote attacker to delete arbitrary know files on the host.

CPENameOperatorVersion
htmlyeq2.8.1
htmlyeq2.6.3
htmlyeq1.1
htmlyeq2.5.7
htmlyeq2.6.5
htmlyeq2.6.6
htmlyeq1.6
htmlyeq2.5.8
htmlyeq2.6.2
htmlyeq2.6.9

Name	Operator	Version
htmly	eq	2.8.1
htmly	eq	2.6.3
htmly	eq	1.1
htmly	eq	2.5.7
htmly	eq	2.6.5
htmly	eq	2.6.6
htmly	eq	1.6
htmly	eq	2.5.8
htmly	eq	2.6.2
htmly	eq	2.6.9

Rows per page:

1-10 of 451

References

github.com/danpros/htmly/issues/481