CVE-2021-36471: Adminlte.io AdminLTE

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Directory Traversal vulnerability in AdminLTE 3.1.0 allows remote attackers to gain escalated privilege and view sensitive information via /admin/index2.html, /admin/index3.html URIs. Note: AdminLTE developers dispute that this a weakness with AdminLTE and is instead a misconfiguration error on various websites by the website developers.

Affected products

Published 2023-02-07. Last modified 2026-06-17.