← Database

CVE-2021-40870

CRITICAL CVSS: 9.8 Published: 2021-09-13 Modified: 2026-06-17

Description

An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.

Affected Platforms

Aviatrix Controller

Weakness Type

CWE-23

References