Lucene search

K
osvGoogleOSV:CVE-2021-3694
HistoryAug 23, 2021 - 1:15 p.m.

CVE-2021-3694

2021-08-2313:15:07
Google
osv.dev
11
ledgersmb
html-encoding
remote code execution
information disclosure

AI Score

9.3

Confidence

High

EPSS

0.026

Percentile

90.4%

LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure.

AI Score

9.3

Confidence

High

EPSS

0.026

Percentile

90.4%