Exploitation Summary
EIP tracks 1 public exploit for CVE-2021-21014. PoCs published by HoangKien1020.
AI-analyzed exploit summary The repository lacks actual exploit code and only provides a brief description of CVE-2021-21014, a file upload restriction bypass in Magento. It references external links but does not include technical details or functional PoC code.
Description
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.
Exploits (1)
The repository lacks actual exploit code and only provides a brief description of CVE-2021-21014, a file upload restriction bypass in Magento. It references external links but does not include technical details or functional PoC code.
References (1)
Scores
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H