exploitDog

CVE-2021-32095

Опубликовано: 07 мая 2021

Источник: nvd

CVSS3: 8.1

CVSS2: 5.5

EPSS Низкий

Описание

U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to delete arbitrary files.

Ссылки

https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed
Third Party Advisory
https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover
Third Party Advisory
https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed
Third Party Advisory
https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nsa:emissary:5.9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00287

Низкий

8.1 High

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-862

Связанные уязвимости

GHSA-9894-h296-27h4

github

больше 3 лет назад

U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to delete arbitrary files.

EPSS

Процентиль: 52%

0.00287

Низкий

8.1 High

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-862