Skip to content
OpenAdvisories
High · 7.2 Known exploited CVE-2021-22900 EUVD-2021-10032GHSA-j8cw-m86f-rxgw

A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administr…

Published May 27, 2021 · Updated Oct 21, 2025 · Assigned by hackerone

Description

A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.

Affected products

VendorProductAffectedFixed
— Pulse Secure Secure Fixed in 9.1R11.4 —

References