Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-32835

Опубликовано: 09 сент. 2021
Источник: nvd
CVSS3: 9.9
CVSS2: 6.5
EPSS Низкий

Описание

Eclipse Keti is a service that was designed to protect RESTfuls API using Attribute Based Access Control (ABAC). In Keti a sandbox escape vulnerability may lead to post-authentication Remote Code execution. This vulnerability is known to exist in the latest commit at the time of writing this CVE (commit a1c8dbe). For more details see the referenced GHSL-2021-063.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:eclipse:keti:-:*:*:*:*:*:*:*

EPSS

Процентиль: 85%
0.02508
Низкий

9.9 Critical

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-693

Связанные уязвимости

github
больше 3 лет назад

Eclipse Keti is a service that was designed to protect RESTfuls API using Attribute Based Access Control (ABAC). In Keti a sandbox escape vulnerability may lead to post-authentication Remote Code execution. This vulnerability is known to exist in the latest commit at the time of writing this CVE (commit a1c8dbe). For more details see the referenced GHSL-2021-063.

EPSS

Процентиль: 85%
0.02508
Низкий

9.9 Critical

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-693