CVE-2021-33213

CVE-2021-33213 describes a Server-Side Request Forgery (SSRF) vulnerability in the "Upload from URL" feature of Elements-IT HTTP Commander 5.3.3. This flaw allows authenticated attackers to retrieve internal HTTP and FTP files by providing an internal address. Rated 6.5 Medium, the vulnerability has a network attack vector, low attack complexity, and high confidentiality impact, enabling unauthorized access to sensitive internal network resources. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.