Vulnerabilities > CVE-2021-33213 - Server-Side Request Forgery (SSRF) vulnerability in Element-It Http Commander 5.3.3
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to retrieve HTTP and FTP files from the internal server network by inserting an internal address.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |