CVE-2021-43397

LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin.

• CWE-522

• http://packetstormsecurity.com/files/164997/LiquidFiles-3.5.13-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2021/Nov/40Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2021/Nov/52Exploit, Mailing List, Third Party Advisory
• https://forum.liquidfiles.com/forums/news.6/Vendor Advisory
• https://man.liquidfiles.com/release_notes/version_3-6-x.htmlRelease Notes, Vendor Advisory
• http://packetstormsecurity.com/files/164997/LiquidFiles-3.5.13-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2021/Nov/40Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2021/Nov/52Exploit, Mailing List, Third Party Advisory
• https://forum.liquidfiles.com/forums/news.6/Vendor Advisory
• https://man.liquidfiles.com/release_notes/version_3-6-x.htmlRelease Notes, Vendor Advisory

Published

Nov 11, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43391An Out-of-Bounds Read vulnerability exists when reading a DX…7.8
• CVE-2021-43392STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN…6.2
• CVE-2021-43393STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN…6.2
• CVE-2021-43394Unisys OS 2200 Messaging Integration Services (NTSI) 7R3B IC…9.8
• CVE-2021-43395An issue was discovered in illumos before f859e7171bb5db3432…5.5
• CVE-2021-43396In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc…7.5
• CVE-2021-43398Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing …5.3
• CVE-2021-43399The Yubico YubiHSM YubiHSM2 library 2021.08, included in the…7.5
• CVE-2021-4340The uListing plugin for WordPress is vulnerable to generic S…7.5
• CVE-2021-43400An issue was discovered in gatt-database.c in BlueZ 5.61. A …9.1
• CVE-2021-43403An issue was discovered in FusionPBX before 4.5.30. The log_…6.5
• CVE-2021-43404An issue was discovered in FusionPBX before 4.5.30. The FAX …8.8