VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 4, 2021· Updated Jun 17, 2026

CVE-2021-26293

CVE-2021-26293

Description

An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversal to create new files (such as an executable file under the web root). This is related to DAVServer.php in 8.x and DAV/Server.php in 7.x.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Afterlogic/Aurora2 versions
    cpe:2.3:a:afterlogic:aurora:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:afterlogic:aurora:*:*:*:*:*:*:*:*range: <=8.5.3
    • (no CPE)range: <=8.5.3
  • Afterlogic/Webmail2 versions
    cpe:2.3:a:afterlogic:webmail_pro:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:afterlogic:webmail_pro:*:*:*:*:*:*:*:*range: <=8.5.3
    • (no CPE)range: <=8.5.3
  • AfterLogic/Aurora and WebMail Prodescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.