.. / CVE-2021-1499

• File Upload
• Nuclei
• Web

Exploit for Cisco HyperFlex HX Data Platform - Arbitrary File Upload (CVE-2021-1499)

Description:

Cisco HyperFlex HX Data Platform contains an arbitrary file upload vulnerability in the web-based management interface. An attacker can send a specific HTTP request to an affected device, thus enabling upload of files to the affected device with the permissions of the tomcat8 user.

Nuclei Template

View the template here CVE-2021-1499.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-1499.yaml

References: