CVE-2021-3035

2021-04-2004:15:12

Google

osv.dev

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.3%

JSON

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted.

CPENameOperatorVersion
checkoveq2.0.3
checkoveq2.0.15
checkoveq2.0.23
checkoveq2.0.24
checkoveq2.0.8
checkoveq2.0.17
checkoveq2.0.10
checkoveq2.0.4
checkoveq2.0.11
checkoveq2.0.0