GitHub_MCVELIST:CVE-2021-32673CVE-2021-32673 Remote Command Execution in reg-keygen-git-hash-plugin
8.8 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L
9.9 High
AI Score
Confidence
High
0.014 Low
EPSS
Percentile
86.4%
reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue.
CNA Affected
[
{
"product": "reg-suit",
"vendor": "reg-viz",
"versions": [
{
"status": "affected",
"version": "< 0.10.16"
}
]
}
]Related
8.8 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L
9.9 High
AI Score
Confidence
High
0.014 Low
EPSS
Percentile
86.4%