Feed/CVE-2021-41277

CVE-2021-41277CRITICALCVSS 10.0CISA KEV: Actively Exploited

Metabase GeoJSON API Local File Inclusion Vulnerability

Published Nov 12, 2024·Updated Oct 8, 2026

NVD Description

Metabase contains a local file inclusion vulnerability in the custom map support in the API to read GeoJSON formatted data.

Public Exploits & PoCs10 found

[POC] CVE-2021-41277 — CVE-2021-41277

Metabase任意文件读取漏洞批量扫描工具

[POC] CVE-2021-41277 — CVE-2021-41277

PoC for CVE-2021-41277

[POC] CVE-2021-41277 — CVE-2021-41277

simple program for exploit metabase

[POC] CVE-2021-41277 — CVE-2021-41277_SSRF

CVE-2021-41277 can be extended to an SSRF

[POC] CVE-2021-41277 — CVE-2021-41277

plugin made for LeakiX

[POC] CVE-2021-41277 — CVE-2021-41277

MetaBase 任意文件读取

[POC] CVE-2021-41277 — CVE-2021-41277

Metabase GeoJSON map local file inclusion

[POC] CVE-2021-41277 — Metabase-cve-2021-41277

Metabase 任意文件读取

[POC] CVE-2021-41277 — Metabase_Nmap_Script

It is a nmap script for metabase vulnerability (CVE-2021-41277)

[POC] CVE-2021-41277 — CVE-2021-41277

MetaBase 任意文件读取漏洞 fofa批量poc

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free