pratikjojode/vcenter-cve-2021-21980-lab

PoC

Realistic vulnerable lab for CVE-2021-21980 (VMware vSphere Path Traversal) - Actual file exploitation, not a mock server

view exploit source poc_in_githubauthor pratikjojodepublished 2025-12-01catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2021-21980US	high7.5	4.67% (92nd)	Exploit	2021-11-24
The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.