CVE-2021-43840

🗓️ 17 Dec 2021 18:15:11Reported by GitHub_MType

message_bus for Ruby processes and web clients prior to 3.3.7 allows path traversal leading to secret information disclosure

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2021-43840	17 Dec 202122:37	–	circl
CNNVD	MessageBus 路径遍历漏洞	17 Dec 202100:00	–	cnnvd
CNVD	MessageBus path traversal vulnerability	21 Dec 202100:00	–	cnvd
Cvelist	CVE-2021-43840 Path traversal in message_bus	17 Dec 202118:15	–	cvelist
EUVD	EUVD-2021-2612	7 Oct 202500:30	–	euvd
Github Security Blog	Path traversal when MessageBus::Diagnostics is enabled	17 Dec 202119:59	–	github
NVD	CVE-2021-43840	17 Dec 202119:15	–	nvd
OSV	GHSA-XMGJ-5FH3-XJMM Path traversal when MessageBus::Diagnostics is enabled	17 Dec 202119:59	–	osv
Prion	Path traversal	17 Dec 202119:15	–	prion
RedhatCVE	CVE-2021-43840	22 May 202521:34	–	redhatcve

NVD

Vulners

Node

discourse message_busRange<3.3.7ruby

[
  {
    "product": "message_bus",
    "vendor": "discourse",
    "versions": [
      {
        "status": "affected",
        "version": "< 3.3.7"
      }
    ]
  }
]

Source	Link
github	www.github.com/discourse/message_bus/commit/9b6deee01ed474c7e9b5ff65a06bb0447b4db2ba
github	www.github.com/discourse/message_bus/security/advisories/GHSA-xmgj-5fh3-xjmm

21 Nov 2024 06:29Current

5.5Medium risk

Vulners AI Score5.5

CVSS 23.5

CVSS 3.14.4 - 6.5

EPSS0.00232

CWE-22