.. / CVE-2021-21351

Exploit for XStream <1.4.16 - Remote Code Execution (CVE-2021-21351)

Description:

XStream before 1.4.16 is susceptible to remote code execution. An attacker can load and execute arbitrary code from a remote host via manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations.

Nuclei Template

View the template here CVE-2021-21351.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-21351.yaml
Copy

References:

https://x-stream.github.io/CVE-2021-21351.html
http://x-stream.github.io/changes.html#1.4.16
https://paper.seebug.org/1543/
https://nvd.nist.gov/vuln/detail/CVE-2021-21351
https://github.com/vulhub/vulhub/tree/master/xstream/CVE-2021-21351