Linux Distros Unpatched Vulnerability : CVE-2021-23727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends result stores. When reading task metadata from t...

FreeBSD : py39-celery -- command injection vulnerability (0a38a0d9-757f-4ac3-9561-b439e933dfa9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0a38a0d9-757f-4ac3-9561-b439e933dfa9 advisory. - This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored i...

Security Bulletin: Celery as used by IBM QRadar Advisor With Watson App is vulnerable to arbitrary command execution (CVE-2021-23727)

Summary Celery as used by IBM QRadar Advisor With Watson App is vulnerable to arbitrary command execution. IBM has addressed the relevant vulnerabilities. Vulnerability Details CVEID:CVE-2021-23727 DESCRIPTION: Celery could allow a remote authenticated attacker to execute arbitrary commands on th...

Mageia: Security Advisory (MGASA-2022-0029)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated python-celery packages fix security vulnerability

Stored Command Injection CVE-2021-23727 Also fixes unfulfilled python3.8distbilliard installing pythone-celery...

Fedora: Security Advisory for python-celery (FEDORA-2022-1dae017601)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

bower-cache (=0.5.0), cacahuate (>=3.9.0 <=4.0.0a6) +58 more potentially affected by CVE-2021-23727 via celery (>=3.1.11 <=5.2.1)

celery PYPI version =3.1.11, =3.9.0, =0.0.2, =1.0.1, =0.19.0, =2.0.0a0, =1.0.0, =1.0.24, =0.0.5, =0.0.13, =1.0.18, =1.2.7 and more Source cves: CVE-2021-23727 Source advisory: OSV:GHSA-Q4XR-RC97-M4XX...

CVE-2021-23727

creationtimestamp| type| source ---|---|--- 2021-12-29 20:31:22+00:00| seen| https://t.me/cibsecurity/34746...

CVE-2021-23727

This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends result stores. When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery...

bower-cache (=0.5.0), cacahuate (>=3.9.0 <=4.0.0a6) +58 more potentially affected by CVE-2021-23727 via celery (>=3.1.11 <=5.2.1)

celery PYPI version =3.1.11, =3.9.0, =0.0.2, =1.0.1, =0.19.0, =2.0.0a0, =1.0.0, =1.0.24, =0.0.5, =0.0.13, =1.0.18, =1.2.7 and more Source cves: CVE-2021-23727 Source advisory: OSV:PYSEC-2021-858...

CVE-2021-23727

This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends result stores. When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery...

CVE-2021-23727

CVE-2021-23727 affects Celery before 5.2.2. An attacker who can access or manipulate task metadata stored in a backend could trigger a stored command injection by deserializing backend metadata. Documented impact is remote command execution when the backend data can be crafted or intercepted by a...

django-cog (=1.3.5), endi-celery (=6.3.4) +3 more potentially affected by CVE-2021-23727 via celery (=5.2.1)

celery PYPI version =5.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on celery and may be impacted: - django-cog =1.3.5 - endi-celery =6.3.4 - fikkie =0.1.0, =0.19.0, =202112.0.0b9, =202112.0.0b10 Source cves: CVE-2021-23727 Source advisory:...