Sploitus

Exploit for Improper Input Validation in Vmware View Planner

CVE-2021-21978

githubexploit · 2021-03-05

Exploit Code

README13 lines
## https://sploitus.com/exploit?id=3CA150A7-76FA-566E-A65C-9CE92B0C857A
# CVE-2021-21978  
CVE-2021-21978: Remote Code Execution vulnerability  

**Affected versions:**  
VMware View Planner Harness 4.X  

Similar to CVE-2021-21978, this vulnerability allows for the upload of arbitrary files without proper authorization. The vulnerability also enables remote code execution by modifying the built-in Python script. It’s important to note that the command is executed within a Docker container, rather than directly on the system.  

**How to use:**  
```
go run CVE-2021-21978.go -h -c
```