CVE-2021-22937 - AskarLabs CVE Database

CVE-2021-22937

Vendor N/A

Product Pulse Connect Secure

Weakness CWE-434 · Unrestricted file upload

Published August 16, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write via a maliciously crafted archive uploaded in the administrator web interface.

Key dates

02Disclosure timeline

August 16, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-22937 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/434.html

Related vulnerabilities

04Related CVE

CVE-2023-1559 SourceCodester Storage Unit Rental Management System unrestricted upload CVE-2023-6826 E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload CVE-2024-12478 InvoicePlane 1 upload_file unrestricted upload CVE-2026-5001 PromtEngineer localGPT server.py do_POST unrestricted upload CVE-2025-10427 SourceCodester Pet Grooming Management Software user.php unrestricted upload