CVE-2021-42671

An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can leverage this vulnerability in order to bypass access controls and access all the files uploaded to the web server without the need of authentication or authorization.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

19.68% chance of exploitation in the next 30 days, 97th percentile

Published

2021-11-05

Updated

2024-08-04

Proof-of-concept exploits (3)

• TheHackingRabbi/CVE-2021-426711★ · 2022-03-24
• nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42671
• 0xDeku/CVE-2021-426711★ · 2022-03-24

References

• CVE Record
• NVD entry

Related

• CVE-2021-42662
• CVE-2021-42663
• CVE-2021-42664
• CVE-2021-42665
• CVE-2021-42666
• CVE-2021-42667