CVE-2021-40870 PoC — Aviatrix Controller 代码问题漏洞

Source

https://github.com/System00-Security/CVE-2021-40870

Associated Vulnerability

Title: Aviatrix Controller 代码问题漏洞 (CVE-2021-40870)
Description:An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.

Description

Unrestricted upload of file with dangerous type in Aviatrix allows an authenticated user to execute arbitrary code

Readme

# CVE-2021-40870
Unrestricted upload of file with dangerous type in Aviatrix allows an authenticated user to execute arbitrary code

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →