exploitDog

CVE-2021-42951

Опубликовано: 01 мар. 2022

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

A Remote Code Execution (RCE) vulnerability exists in Algorithmia MSOL all versions before October 10 2021 of SaaS. Users can register for an account and are allocated a set number of credits to try the product. Once users authenticate, they can proceed to create a new, specially crafted Algorithm and subsequently launch remote code execution with their desired result.

Ссылки

http://algorithmia.com
Vendor Advisory
https://seclists.org/fulldisclosure/2022/Feb/33
Mailing List
Third Party Advisory
http://algorithmia.com
Vendor Advisory
https://seclists.org/fulldisclosure/2022/Feb/33
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:algorithmia:msol:*:*:*:*:*:*:*:*

Версия до 2021-10-10 (исключая)

EPSS

Процентиль: 86%

0.02852

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-q32h-hw68-3g8p

CVSS3: 8.8

github

почти 4 года назад

A Remote Code Execution (RCE) vulnerability exists in Algorithmia MSOL all versions before October 10 2021 of SaaS. Users can register for an account and are allocated a set number of credits to try the product. Once users authenticate, they can proceed to create a new, specially crafted Algorithm and subsequently launch remote code execution with their desired result.

EPSS

Процентиль: 86%

0.02852

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo