Exploit for CVE-2021-41277

kitploit · 2026-09-09

Description

Ruby exploit program for Metabase (CVE-2021-41277).

Affected Metabase versions

Metabase= 0.40.0, 0.40.1, 0.40.2, 0.40.3, 0.40.4, 1.40.0, 1.40.1, 1.40.2, 1.40.3, 1.40.4

All known vulnerabilities by product

CVSS 10.0 for CVE-2021-41277

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:LOW

EPSS Score

97.2%higher than 99.9% of all CVEs

Updated 2026-09-11

CVE Information

Exploit Details

Modified:2026-09-09 23:38

Last Seen:2026-09-10 00:00

Reporter:KitPloit

Tags

MetabaseexploitRubyCVE-2021-41277httparty

Other exploits for CVE-2021-41277

Metabase_CVE-2021-41277

2026-09-11 KitPloitKITPLOIT

CVE-2021-41277_SSRF

2026-09-10 KitPloitKITPLOIT

Metabase_Nmap_Script

2026-09-10 KitPloitKITPLOIT

2026-09-10 KitPloitKITPLOIT

2026-09-10 KitPloitKITPLOIT

2026-09-10 KitPloitKITPLOIT

2026-09-10 KitPloitKITPLOIT

PoC-Metabase-CVE-2021-41277

2026-09-10 KitPloitKITPLOIT

Exploit Code

MARKDOWN16 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-Z3N70-CVE-2021-41277
# CVE-2021-41277

![Alt text](https://raw.githubusercontent.com/z3n70/CVE-2021-41277/main/littleboy.png?raw=true)

simple program for exploit metabase

#install

  * gem install httparty
  * gem install colorize
  * gem install timeout



ruby CVE.rb