Lucene search
+L

7 matches found

CNVD
CNVD
added 2022/03/08 12:00 a.m.36 views

Antaris RazorEngine has an unspecified vulnerability

Antaris RazorEngine is an open source templating engine based on Microsoft's Razor parsing engine from Matthew Abbott, a personal developer in the U.K. Antaris RazorEngine contains a security vulnerability that could be exploited by attackers to execute arbitrary .NET code in a sandboxed...

9.8CVSS4.9AI score0.01861EPSS
SaveExploits2References1
OSV
OSV
added 2022/03/07 12:00 a.m.179 views

GHSA-PH3V-2HQ5-5QFQ Code injection in RazorEngine

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

9.8CVSS9.6AI score0.01861EPSS
SaveExploits2References3
OSV
OSV
added 2022/03/06 6:15 a.m.36 views

CVE-2021-46703

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

9.8CVSS9.6AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/06 6:15 a.m.12 views

CVE-2021-46703

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

9.8CVSS8.1AI score0.01861EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2022/03/06 5:29 a.m.24 views

CVE-2021-46703

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

9.8AI score0.01861EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/03/06 12:00 a.m.9 views

Antaris RazorEngine 安全漏洞

Antaris RazorEngine is an open source templating engine based on Microsoft's Razor parsing engine from Matthew Abbott, a personal developer in the U.K. Antaris RazorEngine contains a security vulnerability that could be exploited by attackers to execute arbitrary .NET code in a sandboxed...

9.8CVSS6.1AI score0.01861EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2022/03/06 12:00 a.m.17 views

PT-2022-12906 · Antaris · Razorengine

Name of the Vulnerable Software and Affected Versions: Antaris RazorEngine versions through 4.5.1-alpha001 Description: An attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. This issue affects products that are no longer supporte...

9.8CVSS7.7AI score0.01861EPSS
SaveExploits2References8
Rows per page
Query Builder