VULNERABILITY INTELLIGENCE

CVE-2021-26293

CVSS score9.8 CRITICAL
EPSS probability7.11%
CISA KEVNot currently listed
Published2021-03-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversal to create new files (such as an executable file under the web root). This is related to DAVServer.php in 8.x and DAV/Server.php in 7.x.

Weakness classification

  • nvd@nist.gov: CWE-22

Primary references