CVE-2021-32829

🗓️ 17 Aug 2021 16:00:12Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 45 Views🌐 WEB

ZStack REST API vulnerability allows post-auth RCE via Java annotation

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2021-32829	17 Aug 202116:15	–	attackerkb
Circl	CVE-2021-32829	17 Aug 202120:15	–	circl
CNNVD	ZStack 代码注入漏洞	17 Aug 202100:00	–	cnnvd
Cvelist	CVE-2021-32829 Post-authentication Remote Code Execution (RCE) in ZStack REST API	17 Aug 202116:00	–	cvelist
EUVD	EUVD-2021-19569	7 Oct 202500:30	–	euvd
NVD	CVE-2021-32829	17 Aug 202116:15	–	nvd
OSV	CVE-2021-32829	17 Aug 202116:15	–	osv
Prion	Design/Logic Flaw	17 Aug 202116:15	–	prion
Positive Technologies	PT-2021-19960 · Zstack · Z-Stack	17 Aug 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-32829	22 May 202521:19	–	redhatcve

NVD

Vulners

Node

zstack rest_apiRange2.2.4–3.8.21

zstack rest_apiRange3.10.0–3.10.8

[
  {
    "product": "zstack",
    "vendor": "zstackio",
    "versions": [
      {
        "status": "affected",
        "version": "< 3.8.21"
      },
      {
        "status": "affected",
        "version": ">=3.10.0, < 3.10.8"
      },
      {
        "status": "affected",
        "version": ">=4.0.0, < 4.1.0"
      }
    ]
  }
]

Source	Link
blog	www.blog.orange.tw/2019/02/abusing-meta-programming-for-unauthenticated-rce.html
securitylab	www.securitylab.github.com/advisories/GHSL-2021-065-zstack/
github	www.github.com/zstackio/zstack/security/advisories/GHSA-6xgq-7rqg-x3q5

Parameter	Position	Path	Description	CWE
script	query param	zstack/v1/batch-queries	Post-authentication RCE via sandbox bypass of the Groovy script evaluation in BatchQuery.query; user-controlled Groovy script in 'script' parameter evaluated on server side.	CWE-863, CWE-94

17 Jun 2026 03:53Current

10High risk

Vulners AI Score10

CVSS 26.5

CVSS 3.19.6 - 9.9

EPSS0.02902