CVE-2021-29100
ArcGIS Earth has a File Parsing Directory Traversal Vulnerability
- State
- Published
- Severity
- 7.8 High
- Published
- May 5, 2021
- Updated
- Apr 10, 2025
- Reserved
- Mar 23, 2021
Description
A path traversal vulnerability exists in Esri ArcGIS Earth versions 1.11.0 and below which allows arbitrary file creation on an affected system through crafted input. An attacker could exploit this vulnerability to gain arbitrary code execution under security context of the user running ArcGIS Earth by inducing the user to upload a crafted file to an affected system.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 7.8 High | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | Esri |
Weaknesses
- CWE-23 Relative Path Traversal
Affected Products
| Product | Versions |
|---|---|
ArcGIS EarthEsri |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.