Lucene search
+L

8 matches found

CNVD
CNVD
•added 2022/03/08 12:00 a.m.•40 views

Antaris RazorEngine has an unspecified vulnerability

Antaris RazorEngine is an open source templating engine based on Microsoft's Razor parsing engine from Matthew Abbott, a personal developer in the U.K. Antaris RazorEngine contains a security vulnerability that could be exploited by attackers to execute arbitrary .NET code in a sandboxed...

9.8CVSS4.9AI score0.01861EPSS
SaveExploits2References1
OSV
OSV
•added 2022/03/07 12:00 a.m.•204 views

GHSA-PH3V-2HQ5-5QFQ Code injection in RazorEngine

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

9.8CVSS9.6AI score0.01861EPSS
SaveExploits2References3
OSV
OSV
•added 2022/03/06 6:15 a.m.•41 views

CVE-2021-46703

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

9.8CVSS9.6AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/06 6:15 a.m.•15 views

CVE-2021-46703

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

9.8CVSS8.1AI score0.01861EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2022/03/06 5:29 a.m.•29 views

CVE-2021-46703

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

9.8AI score0.01861EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2022/03/06 12:00 a.m.•16 views

Antaris RazorEngine 安全漏洞

Antaris RazorEngine is an open source templating engine based on Microsoft's Razor parsing engine from Matthew Abbott, a personal developer in the U.K. Antaris RazorEngine contains a security vulnerability that could be exploited by attackers to execute arbitrary .NET code in a sandboxed...

9.8CVSS6.1AI score0.01861EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2022/03/06 12:00 a.m.•18 views

PT-2022-12906 · Antaris · Razorengine

Name of the Vulnerable Software and Affected Versions: Antaris RazorEngine versions through 4.5.1-alpha001 Description: An attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. This issue affects products that are no longer supporte...

9.8CVSS7.7AI score0.01861EPSS
SaveExploits2References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/06 12:00 a.m.•5 views

CVE-2021-46703: Undefined Security Weakness

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

9.8CVSS8.3AI score0.01861EPSS
SaveExploits2References1
Rows per page
Query Builder