CVE-2021-21064

Magento UPWARD-php version 1.1.4 (and earlier) is affected by a Path traversal vulnerability in Magento UPWARD Connector version 1.1.2 (and earlier) due to the upload feature. An attacker could potentially exploit this vulnerability to upload a malicious YAML file that can contain instructions which allows reading arbitrary files from the remote server. Access to the admin console is required for successful exploitation.

• CWE-22

• https://github.com/magento/upward-php/securityThird Party Advisory
• https://github.com/magento/upward-php/security/advisories/GHSA-p4pw-hpjx-5685Third Party Advisory
• https://github.com/magento/upward-php/securityThird Party Advisory
• https://github.com/magento/upward-php/security/advisories/GHSA-p4pw-hpjx-5685Third Party Advisory

Published

Feb 25, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-21059Acrobat Reader DC versions versions 2020.013.20074 (and earl…7.8
• CVE-2021-2106Vulnerability in the Oracle Customer Interaction History pro…8.2
• CVE-2021-21060Adobe Acrobat Pro DC versions 2020.013.20074 (and earlier), …4.6
• CVE-2021-21061Acrobat Pro DC versions versions 2020.013.20074 (and earlier…3.3
• CVE-2021-21062Acrobat Reader DC versions versions 2020.013.20074 (and earl…7.8
• CVE-2021-21063Acrobat Reader DC versions versions 2020.013.20074 (and earl…7.8
• CVE-2021-21065Adobe Bridge version 11.0 (and earlier) is affected by an ou…7.8
• CVE-2021-21066Adobe Bridge version 11.0 (and earlier) is affected by an ou…7.8
• CVE-2021-21067Adobe Photoshop versions 21.2.5 (and earlier) and 22.2 (and …7.8
• CVE-2021-21068Adobe Creative Cloud Desktop Application version 5.3 (and ea…6.1
• CVE-2021-21069Adobe Creative Cloud Desktop Application version 5.3 (and ea…7.8
• CVE-2021-2107Vulnerability in the Oracle Customer Interaction History pro…8.2