High severity8.8NVD Advisory· Published Mar 15, 2021· Updated Jun 17, 2026
CVE-2021-28379
CVE-2021-28379
Description
web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- VestaCP/Vesta Control Paneldescription
- Range: <=0.9.8-27
Patches
Vulnerability mechanics
References
2- github.com/myvesta/vesta/commit/3402071e950e76b79fa8672a1e09b70d3860f355nvdPatchThird Party Advisory
- packetstormsecurity.com/files/161836/VestaCP-0.9.8-Cross-Site-Request-Forgery.htmlnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.