CVE-2021-41381

Payara Micro Community 5.2021.6 and below allows Directory Traversal.

• CWE-22

• http://packetstormsecurity.com/files/164365/Payara-Micro-Community-5.2021.6-Directory-Traversal.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/169864/Payara-Platform-Path-Traversal.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2022/Nov/11Exploit, Mailing List, Third Party Advisory
• https://github.com/Net-hunter121/CVE-2021-41381/blob/main/CVE:%202021-41381-POCExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50371Exploit, Third Party Advisory, VDB Entry
• https://www.payara.fishProduct, Vendor Advisory
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-054.txtExploit, Third Party Advisory
• http://packetstormsecurity.com/files/164365/Payara-Micro-Community-5.2021.6-Directory-Traversal.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/169864/Payara-Platform-Path-Traversal.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2022/Nov/11Exploit, Mailing List, Third Party Advisory
• https://github.com/Net-hunter121/CVE-2021-41381/blob/main/CVE:%202021-41381-POCExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50371Exploit, Third Party Advisory, VDB Entry
• https://www.payara.fishProduct, Vendor Advisory
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-054.txtExploit, Third Party Advisory

Published

Sep 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41376Azure Sphere Information Disclosure Vulnerability2.3
• CVE-2021-41377Windows Fast FAT File System Driver Elevation of Privilege V…7.8
• CVE-2021-41378Windows NTFS Remote Code Execution Vulnerability7.8
• CVE-2021-41379Windows Installer Elevation of Privilege Vulnerability5.5
• CVE-2021-4138Improved Host header checks to reject requests not sent to a…5.3
• CVE-2021-41380RealVNC Viewer 6.21.406 allows remote VNC servers to cause a…6.5
• CVE-2021-41382Plastic SCM before 10.0.16.5622 mishandles the WebAdmin serv…7.5
• CVE-2021-41383setup.cgi on NETGEAR R6020 1.0.0.48 devices allows an admin …7.2
• CVE-2021-41385The third party intelligence connector in Securonix SNYPR 6.…6.5
• CVE-2021-41387seatd-launch in seatd 0.6.x before 0.6.2 allows privilege es…8.8
• CVE-2021-41388Netskope client prior to 89.x on macOS is impacted by a loca…7.8
• CVE-2021-4139pimcore is vulnerable to Improper Neutralization of Input Du…9