All verified exploits

CVE-2021-42013 Path Traversal and File Disclosure

CVE-2021-42013 is a critical-severity vulnerability, listed in the CISA KEV catalog. AttackerView checks Apache sites for it with a live exploit check.

Deterministic critical Apache CISA KEV Added 1mo ago cve-verified-cve-2021-42013

Is my site vulnerable to CVE-2021-42013?

Reads /etc/passwd through a double-encoded dot sequence. Apache 2.4.50 stopped the single-encoded form and still accepted this one.

Related Apache exploits

CVE-2021-41773 Path Traversal and File Disclosure

Is your app exploitable through CVE-2021-42013?

Scan your domain free