CVE-2021-20745

🗓️ 28 Jun 2021 00:50:33Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 72 Views

Inkdrop v5.3.1 prior allows arbitrary OS command execution by loading invalid ifram

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-20745	28 Jun 202107:22	–	circl
CNNVD	Inkdrop 操作系统命令注入漏洞	22 Jun 202100:00	–	cnnvd
Cvelist	CVE-2021-20745	28 Jun 202100:50	–	cvelist
EUVD	EUVD-2021-8159	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#29949691: Inkdrop vulnerable to OS command injection	22 Jun 202100:00	–	jvn
Japan Vulnerability Notes	Inkdrop vulnerable to OS command injection	22 Jun 202106:06	–	jvn
NVD	CVE-2021-20745	28 Jun 202101:15	–	nvd
Prion	Design/Logic Flaw	28 Jun 202101:15	–	prion
RedhatCVE	CVE-2021-20745	22 May 202519:08	–	redhatcve

NVD

Vulners

Node

inkdrop inkdropRange<5.3.1

[
  {
    "product": "Inkdrop",
    "vendor": "Takuya Matsuyama",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to v5.3.1"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/jp/JVN29949691/index.html
docs	www.docs.inkdrop.app/releases/5.3.1
inkdrop	www.inkdrop.app/

21 Nov 2024 05:47Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.8

CVSS 29.3

EPSS0.00247

CWE-78