8.8
CVE-2021-36359
- EPSS 4.88%
- Veröffentlicht 30.08.2021 05:15:07
- Zuletzt bearbeitet 21.11.2024 06:13:35
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginOrbiTeam BSCW Classic before 7.4.3 allows exportpdf authenticated remote code execution (RCE) via XML tag injection because reportlab\platypus\paraparser.py (reached via bscw.cgi op=_editfolder.EditFolder) calls eval on attacker-supplied Python code. This is fixed in 5.0.12, 5.1.10, 5.2.4, 7.3.3, and 7.4.3.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bscw ≫ Bscw Classic Version < 5.0.12
Bscw ≫ Bscw Classic Version >= 5.1.0 < 5.1.10
Bscw ≫ Bscw Classic Version >= 5.2.0 < 5.2.4
Bscw ≫ Bscw Classic Version >= 7.3.0 < 7.3.3
Bscw ≫ Bscw Classic Version >= 7.4.0 < 7.4.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.88% | 0.885 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|
CWE-91 XML Injection (aka Blind XPath Injection)
The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system.