PT-2022-10230 · Htmly · Htmly

Wszdhf · Published 2022-09-30 · Updated 2025-05-20 · CVE-2021-33354

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions htmly versions prior to 2.8.1

Description The issue allows remote attackers to perform arbitrary file deletions via a modified file parameter. This is a Directory Traversal vulnerability, which enables attackers to access files outside the intended directory structure.

Recommendations For versions prior to 2.8.1, update to version 2.8.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the file parameter in affected API endpoints until a patch is available.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-33354

Affected Products

Htmly

References · 5

• 🔥 https://github.com/danpros/htmly/issues/462 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-33354 · Security Note
• https://osv.dev/vulnerability/CVE-2021-33354 · Vendor Advisory
• https://t.me/cvenotify/123088 · Telegram Post
• https://t.me/cibsecurity/50800 · Telegram Post