CVE-2021-35261

PoC —

CVSS 3.1

9.8 critical

EPSS

<1%p55

Published

Feb 17, 2023 (Feb 17, 2023)

Modified

Jun 17, 2026

Description

File Upload Vulnerability in Yupoxion BearAdmin before commit 10176153528b0a914eb4d726e200fd506b73b075 allows attacker to execute arbitrary remote code via the Upfile function of the extend/tools/Ueditor endpoint.

Vendors: bearadmin project
Products: bearadmin
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.