Lucene search

K
githubexploitAE56F19C-E893-5F33-83B0-E96D552CE1F6
HistoryNov 21, 2021 - 8:47 a.m.

Exploit for Code Injection in Vmware Spring Cloud Netflix

2021-11-2108:47:56
444
exploit
code injection
vmware spring cloud
cve-2021-22053
hystrix dashboard
thymeleaf
springel
vulnerability
mitigation
seccoder security lab

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.628

Percentile

97.9%

CVE-2021-22053: Spring Cloud Netflix Hystrix Dashboard templa…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.628

Percentile

97.9%