Lucene search

MitreCVE-2021-35370

HistoryFeb 24, 2023 - 4:15 p.m.

CVE-2021-35370

2023-02-2416:15:11

mitre

web.nvd.nist.gov

cve-2021-35370

peacexie imcat

code execution

incomplete filtering

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.003

Percentile

69.0%

JSON

An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function.

Affected configurations

Nvd

Node

txjiaimcatMatch5.4

VendorProductVersionCPE
txjiaimcat5.4cpe:2.3:a:txjia:imcat:5.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
txjia	imcat	5.4	cpe:2.3:a:txjia:imcat:5.4:::::::*

References

github.com/peacexie/imcat/issues/8

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.003

Percentile

69.0%

JSON

Related for CVE-2021-35370