Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-32814

Опубликовано: 03 авг. 2021
Источник: nvd
CVSS3: 8.8
CVSS3: 8.1
CVSS2: 9.4
EPSS Низкий

Описание

Skytable is a NoSQL database with automated snapshots and TLS. Versions prior to 0.5.1 are vulnerable to a a directory traversal attack enabling remotely connected clients to destroy and/or manipulate critical files on the host's file system. This security bug has been patched in version 0.5.1. There are no known workarounds aside from upgrading.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:skytable:skytable:*:*:*:*:*:*:*:*
Версия до 0.5.1 (исключая)

EPSS

Процентиль: 72%
0.00735
Низкий

8.8 High

CVSS3

8.1 High

CVSS3

9.4 Critical

CVSS2

Дефекты

CWE-22
CWE-22

EPSS

Процентиль: 72%
0.00735
Низкий

8.8 High

CVSS3

8.1 High

CVSS3

9.4 Critical

CVSS2

Дефекты

CWE-22
CWE-22