CVE-2021-43741: Path Traversal

Published Apr 13, 2022

Updated

CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution.

Affected Software

1 affected component

CmSimple CMSimple=5.4

Event History

Apr 13, 2022

CVE Published

via MITRE·01:16 PM

Data Sourced

via MITRE·01:16 PM

Description

Frequently Asked Questions

What is CVE-2021-43741?

CVE-2021-43741 is a vulnerability in CMSimple 5.4 that allows remote code execution by exploiting a directory traversal vulnerability in the config.php file.

How severe is CVE-2021-43741?

CVE-2021-43741 has a severity rating of 9.8, which is classified as critical.

How does the Directory Traversal vulnerability in CMSimple 5.4 work?

The Directory Traversal vulnerability in CMSimple 5.4 occurs when a user modifies the file name in the config.php file to specify a malicious file, allowing for remote code execution.

What is the affected software version for CVE-2021-43741?

The affected software version for CVE-2021-43741 is CMSimple 5.4.

How can I fix CVE-2021-43741?

To fix CVE-2021-43741, users should update CMSimple to a version that is not affected by the vulnerability and ensure that the config.php file is properly configured to prevent directory traversal attacks.