CVE-2021-41569

SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library (included by default) in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro. Users can escape the context of the configured user-controllable variable and append additional functions native to the macro but not included as variables within the library. This includes a function that retrieves files from the host OS.

• CWE-829

• https://support.sas.com/kb/68/641.htmlVendor Advisory
• https://www.mindpointgroup.com/blog/high-risk-vulnerability-discovery-localfileinclusion-sasExploit, Third Party Advisory
• https://support.sas.com/kb/68/641.htmlVendor Advisory
• https://www.mindpointgroup.com/blog/high-risk-vulnerability-discovery-localfileinclusion-sasExploit, Third Party Advisory

Published

Nov 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41563Tad Book3 editing book function does not filter special char…6.1
• CVE-2021-41564Tad Honor viewing book list function is vulnerable to author…6.5
• CVE-2021-41565TadTools special page parameter does not properly restrict t…6.1
• CVE-2021-41566The file extension of the TadTools file upload function fail…9.8
• CVE-2021-41567The new add subject parameter of Tad Uploader view book list…6.1
• CVE-2021-41568Tad Web is vulnerable to authorization bypass, thus remote a…6.5
• CVE-2021-4157An out of memory bounds write flaw (1 or 2 bytes of memory) …8
• CVE-2021-41570Veritas NetBackup OpsCenter Analytics 9.1 allows XSS via the…5.4
• CVE-2021-41571In Apache Pulsar it is possible to access data from BookKeep…6.5
• CVE-2021-41573Hitachi Content Platform Anywhere (HCP-AW) 4.4.5 and later a…6.5
• CVE-2021-41574Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-41575Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…