CVE-2021-42854

creationtimestamp| type| source ---|---|--- 2022-03-10 20:25:59+00:00| seen| https://t.me/cibsecurity/38714...

CVE-2021-42854

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's DSA PluginServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/plugin/pmx" API. The affected endpoint does not have any input validation of the user's input that allows a malicious payload to be...

CVE-2021-42854

The CVE-2021-42854 issue affects SteelCentral AppInternals, specifically the Dynamic Sampling Agent’s PluginServlet. The vulnerability arises from lack of input validation at the /api/appInternals/1.0/plugin/pmx endpoint, enabling directory traversal and potential injection of malicious loads. Pu...