AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-43264

LOW · CVSS 3.3 EPSS 0.54%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-11-02 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2021-43264
Severity
LOW
CVSS
3.3
EPSS
0.54%

Original NVD Description

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adjusting the path component for the page help file allows attackers to bypass the intended access control for HTML files via directory traversal. It replaces the - character with the / character.