Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-71454
HistorySep 01, 2021 - 12:00 a.m.

Edgegallery developer-be code issue vulnerability

2021-09-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
4

0.005 Low

EPSS

Percentile

77.3%

Edgegallery developer-be is a developer platform that provides development tools/testing environment/online deployment for App developers, divided into two parts: developer-be is the backend part, providing interface calls, and developer-fe is the frontend part, providing interface display. edgegallery developer-be has a code issue vulnerability that stems from a failure to securely inspect uploaded yaml files, which can be exploited by attackers to upload maliciously built yaml files and execute system commands.

CPENameOperatorVersion
edgegallery developer-belt1.0

0.005 Low

EPSS

Percentile

77.3%

Related for CNVD-2021-71454