Lucene search

K
osvGoogleOSV:CVE-2021-33575
HistoryMay 25, 2021 - 11:15 p.m.

CVE-2021-33575

2021-05-2523:15:07
Google
osv.dev
5
pixar ruby-jss
remote code execution
plist gem
xml document processing

AI Score

8

Confidence

High

EPSS

0.01

Percentile

83.4%

The Pixar ruby-jss gem before 1.6.0 allows remote attackers to execute arbitrary code because of the Plist gem’s documented behavior of using Marshal.load during XML document processing.

AI Score

8

Confidence

High

EPSS

0.01

Percentile

83.4%