PT-2021-21313 · Htmly · Htmly

Fuzz7Jop · Published 2021-08-03 · Updated 2021-08-11 · CVE-2021-36701

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions htmly version 2.8.1

Description The issue allows a remote attacker to delete arbitrary known files on the local host when deleting backup files, due to an Arbitrary File Deletion vulnerability.

Recommendations For htmly version 2.8.1, consider restricting access to the backup file deletion functionality until a fix is available. As a temporary workaround, avoid using the delete backup files feature to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2021-36701

Affected Products

Htmly

References · 4

• 🔥 https://github.com/danpros/htmly/issues/481 · Exploit
• https://osv.dev/vulnerability/CVE-2021-36701 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-36701 · Security Note
• https://t.me/cvenotify/18560 · Telegram Post