Lucene search
+L

2 matches found

CNVD
CNVD
added 2022/03/08 12:0 a.m.20 views

Antaris RazorEngine has an unspecified vulnerability

Antaris RazorEngine is an open source templating engine based on Microsoft's Razor parsing engine from Matthew Abbott, a personal developer in the U.K. Antaris RazorEngine contains a security vulnerability that could be exploited by attackers to execute arbitrary .NET code in a sandboxed...

9.8CVSS4.9AI score0.01832EPSS
SaveExploits2References1
OSV
OSV
added 2022/03/06 6:15 a.m.34 views

CVE-2021-46703

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...

9.8CVSS9.6AI score
SaveExploits0References1
Rows per page
Query Builder