CVE-2021-42651

2022-05-1115:15:08

Google

osv.dev

7.9 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.7%

JSON

A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary code through /project/PROJECTNAME/reports/.

CPENameOperatorVersion
pcfeq1.0.8
pcfeq1.0
pcfeq1.0.5
pcfeq.1.0.4
pcfeq1.0.3
pcfeq1.0.6
pcfeq0.9
pcfeq1.0.1
pcfeq1.0.7
pcfeq1.0.2

Name	Operator	Version
pcf	eq	1.0.8
pcf	eq	1.0
pcf	eq	1.0.5
pcf	eq	.1.0.4
pcf	eq	1.0.3
pcf	eq	1.0.6
pcf	eq	0.9
pcf	eq	1.0.1
pcf	eq	1.0.7
pcf	eq	1.0.2

References

gitlab.com/invuls/pentest-projects/pcf/-/commit/67ca59ff668a4f361a0c6b1327287e484987b6f1