CVE-2021-36471

Katalog CVE

CVSS 9.8 · Critical EPSS 1,8%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada adminlte.io adminlte. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Directory Traversal vulnerability in AdminLTE 3.1.0 allows remote attackers to gain escalated privilege and view sensitive information via /admin/index2.html, /admin/index3.html URIs. Note: AdminLTE developers dispute that this a weakness with AdminLTE and is instead a misconfiguration error on various websites by the website developers.

Rincian

Terbit di NVD

7 Februari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 77,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/cybersaki/31ffe679a5552c1047164e3a5b01c2fd advisory pihak ketiga
• https://github.com/ColorlibHQ/AdminLTE/issues/4948