CVE-2021-25808

2021-07-2320:15:08

Google

osv.dev

7.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.1%

JSON

A code injection vulnerability in backup/plugin.php of Bludit 3.13.1 allows attackers to execute arbitrary code via a crafted ZIP file.

CPENameOperatorVersion
bluditeq2.1.1
bluditeq3.9.0-beta1
bluditeq2.3.1
bluditeq0.1
bluditeq3.0.0
bluditeq0.6.2
bluditeq2.0-beta2
bluditeq3.7.1
bluditeq1.3-beta2
bluditeq1.5-beta2

Name	Operator	Version
bludit	eq	2.1.1
bludit	eq	3.9.0-beta1
bludit	eq	2.3.1
bludit	eq	0.1
bludit	eq	3.0.0
bludit	eq	0.6.2
bludit	eq	2.0-beta2
bludit	eq	3.7.1
bludit	eq	1.3-beta2
bludit	eq	1.5-beta2

Rows per page:

1-10 of 901

References

github.com/bludit/bludit/issues/1298