EUVD-2021-2612

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Path traversal vulnerability in MessageBus before version 3.3.7 can disclose confidential information.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2021-43840	17 Dec 202122:37	–	circl
CNNVD	MessageBus 路径遍历漏洞	17 Dec 202100:00	–	cnnvd
CNVD	MessageBus path traversal vulnerability	21 Dec 202100:00	–	cnvd
CVE	CVE-2021-43840	17 Dec 202118:15	–	cve
Cvelist	CVE-2021-43840 Path traversal in message_bus	17 Dec 202118:15	–	cvelist
Github Security Blog	Path traversal when MessageBus::Diagnostics is enabled	17 Dec 202119:59	–	github
NVD	CVE-2021-43840	17 Dec 202119:15	–	nvd
OSV	GHSA-XMGJ-5FH3-XJMM Path traversal when MessageBus::Diagnostics is enabled	17 Dec 202119:59	–	osv
Prion	Path traversal	17 Dec 202119:15	–	prion
RedhatCVE	CVE-2021-43840	22 May 202521:34	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "f4f1354f-f206-3e2d-ac27-c6b3a7c89248",
        "vendor": {
          "name": "discourse"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "6b4ad26f-7d03-3e94-9d94-04a46ae5e479",
        "product": {
          "name": "message_bus"
        },
        "product_version": "< 3.3.7"
      }
    ]
  }
]

Source	Link
github	www.github.com/discourse/message_bus/security/advisories/GHSA-xmgj-5fh3-xjmm
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-43840
github	www.github.com/discourse/message_bus/commit/9b6deee01ed474c7e9b5ff65a06bb0447b4db2ba
github	www.github.com/discourse/message_bus
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/message_bus/CVE-2021-43840.yml
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.14.4 - 6.5

CVSS 23.5

EPSS0.00232