CVE-2021-32673

2021-06-0817:15:07

Google

osv.dev

9.6 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.4%

JSON

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue.

CPENameOperatorVersion
reg-suiteq0.7.14
reg-suiteq0.0.3
reg-suiteq0.5.7
reg-suiteq0.0.18
reg-suiteq0.7.13
reg-suiteq0.0.19
reg-suiteq0.10.12
reg-suiteq0.7.17
reg-suiteq0.6.1
reg-suiteq0.5.6

Name	Operator	Version
reg-suit	eq	0.7.14
reg-suit	eq	0.0.3
reg-suit	eq	0.5.7
reg-suit	eq	0.0.18
reg-suit	eq	0.7.13
reg-suit	eq	0.0.19
reg-suit	eq	0.10.12
reg-suit	eq	0.7.17
reg-suit	eq	0.6.1
reg-suit	eq	0.5.6