CVE-2021-36711

Published Jul 16, 2022·Updated Jun 16, 2026

NVD Description

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.

PoC: Sashimi-Evil-OctoBot-Tentacle

Script PoC that exploits the Tentacles upload functionality of OctoBot trading bot and which leads to a remote code execution (RCE). CVE-2021-36711

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Get alerted for CVEs like this