CVE-2021-41381

HIGH NUCLEI

Payara Micro Community < 5.2021.6 - Path Traversal

Title source: rule

Description

Payara Micro Community 5.2021.6 and below allows Directory Traversal.

Exploits (2)

exploitdb WRITEUP

by Yasser Khan · textwebappsmultiple

https://www.exploit-db.com/exploits/50371

View Code ZIP pw:eip

nomisec WRITEUP 2 stars

by Net-hunter121 · poc

https://github.com/Net-hunter121/CVE-2021-41381

View Code ZIP pw:eip

Nuclei Templates (1)

Payara Micro Community 5.2021.6 Directory Traversal

HIGHby pikpikcu

References (7)

[Exploit, Mailing List, Third Party Advisory] http://seclists.org/fulldisclosure/2022/Nov/11

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/164365/Payara-Micro-Community-5.2021.6-Directory-Traversal.html

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/169864/Payara-Platform-Path-Traversal.html

[Exploit, Third Party Advisory] https://github.com/Net-hunter121/CVE-2021-41381/blob/main/CVE:%202021-41381-POC

[Exploit, Third Party Advisory, VDB Entry] https://www.exploit-db.com/exploits/50371

[Product, Vendor Advisory] https://www.payara.fish

[Exploit, Third Party Advisory] https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-054.txt

Scores

CVSS v3 7.5

EPSS 0.8433

EPSS Percentile 99.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-22

Status published

Products (1)

payara/micro_community < 5.2021.6

Published Sep 23, 2021

Tracked Since Feb 18, 2026