CVE-2021-42342

Published Oct 14, 2021·Updated Jun 16, 2026

NVD Description

An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form variables can be passed to CGI scripts without being prefixed with the CGI prefix. This permits tunneling untrusted environment variables into vulnerable CGI scripts.

Public Exploits & PoCs2 found

PoC: CVE-2021-42342

CVE-2021-42342 RCE

PoC: goahead-webserver-pre-5.1.5-RCE-PoC-CVE-2021-42342-

A small PoC for the recent RCE found in the Goahead Webserver prior to version 5.1.5.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free