CVE-2021-22941
CRITICAL KEV RANSOMWARECitrix ShareFile <5.11.20 - Info Disclosure
Title source: llmExploitation Summary
CVE-2021-22941 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 25, 2022, with confirmed use in ransomware campaigns. EIP tracks 3 public exploits from researchers including hoav18, pratikjojode.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2021-22941, a remote code execution vulnerability in Citrix ShareFile. The exploit leverages a path traversal flaw to upload a malicious ASPX shell, enabling arbitrary command execution.
Description
Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.
Exploits (3)
This repository contains a functional exploit for CVE-2021-22941, a remote code execution vulnerability in Citrix ShareFile. The exploit leverages a path traversal flaw to upload a malicious ASPX shell, enabling arbitrary command execution.
This repository contains a mock server simulating CVE-2021-22941, a path traversal vulnerability in Citrix ShareFile Storage Zones Controller. The server.py script replicates the vulnerable behavior of the Upload.aspx endpoint, demonstrating broken access control and path traversal risks.
This repository contains a functional exploit for CVE-2021-22941, a remote code execution vulnerability in Citrix ShareFile. The exploit leverages a path traversal and file upload vulnerability to deploy a malicious ASPX shell or execute arbitrary commands via a crafted multipart form request.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H