Lucene search
+L

9 matches found

CNVD
CNVD
•added 2022/03/08 12:00 a.m.•43 views

Antaris RazorEngine has an unspecified vulnerability

Antaris RazorEngine is an open source templating engine based on Microsoft's Razor parsing engine from Matthew Abbott, a personal developer in the U.K. Antaris RazorEngine contains a security vulnerability that could be exploited by attackers to execute arbitrary .NET code in a sandboxed...

9.8CVSS4.9AI score0.01861EPSS
SaveExploits2References1
osv_ghsa
osv_ghsa
•added 2022/03/07 12:00 a.m.•219 views

GHSA-PH3V-2HQ5-5QFQ Code injection in RazorEngine

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

9.8CVSS9.6AI score0.01861EPSS
SaveExploits2References3
osv_cve
osv_cve
•added 2022/03/06 6:15 a.m.•48 views

CVE-2021-46703

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

9.8CVSS9.6AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/06 6:15 a.m.•19 views

CVE-2021-46703

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

9.8CVSS8.1AI score0.01861EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2022/03/06 5:29 a.m.•32 views

CVE-2021-46703

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

9.8AI score0.01861EPSS
SaveExploits2References1
Mend
Mend
•added 2022/03/06 5:29 a.m.•11 views

CVE-2021-46703

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

9.8CVSS0.01861EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2022/03/06 12:00 a.m.•25 views

PT-2022-12906 · Antaris · Razorengine

Name of the Vulnerable Software and Affected Versions: Antaris RazorEngine versions through 4.5.1-alpha001 Description: An attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. This issue affects products that are no longer supporte...

9.8CVSS7.7AI score0.01861EPSS
SaveExploits2References8
CNNVD
CNNVD
•added 2022/03/06 12:00 a.m.•20 views

Antaris RazorEngine security vulnerability

Antaris RazorEngine is an open source templating engine based on Microsoft's Razor parsing engine from Matthew Abbott, a personal developer in the U.K. Antaris RazorEngine contains a security vulnerability that could be exploited by attackers to execute arbitrary .NET code in a sandboxed...

9.8CVSS6.1AI score0.01861EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/06 12:00 a.m.•12 views

CVE-2021-46703: Undefined Security Weakness

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

9.8CVSS8.3AI score0.01861EPSS
SaveExploits2References1
Rows per page
Query Builder