Lucene search

K
osvGoogleOSV:CVE-2021-43264
HistoryNov 02, 2021 - 10:15 p.m.

CVE-2021-43264

2021-11-0222:15:09
Google
osv.dev
2

6.8 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.0%

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adjusting the path component for the page help file allows attackers to bypass the intended access control for HTML files via directory traversal. It replaces the - character with the / character.

6.8 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.0%

Related for OSV:CVE-2021-43264