exploitDog

CVE-2021-43466

Опубликовано: 09 нояб. 2021

Источник: nvd

CVSS3: 9.8

CVSS2: 6.8

EPSS Низкий

Описание

In the thymeleaf-spring5:3.0.12 component, thymeleaf combined with specific scenarios in template injection may lead to remote code execution.

Ссылки

https://gitee.com/wayne_wwang/wayne_wwang/blob/master/2021/10/31/ruoyi+thymeleaf-rce/index.html
Exploit
Third Party Advisory
https://security.netapp.com/advisory/ntap-20221014-0001/
Third Party Advisory
https://vuldb.com/?id.186365
Third Party Advisory
https://gitee.com/wayne_wwang/wayne_wwang/blob/master/2021/10/31/ruoyi+thymeleaf-rce/index.html
Exploit
Third Party Advisory
https://security.netapp.com/advisory/ntap-20221014-0001/
Third Party Advisory
https://vuldb.com/?id.186365
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:thymeleaf:thymeleaf:3.0.12:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04592

Низкий

9.8 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-qcj6-jqrg-4wp2

CVSS3: 9.8

github

около 4 лет назад

Template injection in thymeleaf-spring5

EPSS

Процентиль: 89%

0.04592

Низкий

9.8 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-94