CVE-2021-40870 — Aviatrix Controller Unrestricted Upload of File

Description

Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.

How to fix CVE-2021-40870

No package mapping is available — consult the references below for vendor-specific guidance.

Is CVE-2021-40870 being exploited?

Yes — CVE-2021-40870 is on the CISA Known Exploited Vulnerabilities (KEV) catalog. Patch immediately.

Affected packages (0)

No package mapping in OSV.