CVE-2021-32096

The ConsoleAction component of U.S. National Security Agency NSA Emissary 5.9.0 allows a CSRF attack that results in injecting arbitrary Ruby code for an eval call via the CONSOLECOMMANDSTRING parameter...

PT-2021-19664

Name of the Vulnerable Software and Affected Versions: Emissary version 5.9.0 Description: The issue allows for a CSRF attack, which can result in injecting arbitrary Ruby code via the CONSOLE COMMAND STRING parameter. This can lead to an eval call, potentially allowing an attacker to execute...

Emissary 跨站请求伪造漏洞

Emissary is a software application. A P2P-based data-driven workflow engine that operates across heterogeneous and potentially widely distributed multi-tier P2P network computing resources. U.S. National Security Agency NSA Emissary 5.9.0 suffers from a cross-site request forgery vulnerability th...