Lucene search
K

4 matches found

OSV
OSV
added 2021/08/30 4:24 p.m.20 views

GHSA-V3CG-H3F6-2242 Injection in MockServer

MockServer is open source software which enables easy mocking of any system you integrate with via HTTP or HTTPS. An attacker that can trick a victim into visiting a malicious site while running MockServer locally, will be able to run arbitrary code on the MockServer machine. With an overly broad...

6.1CVSS9.4AI score0.02164EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2021/08/30 4:24 p.m.61 views

Injection in MockServer

MockServer is open source software which enables easy mocking of any system you integrate with via HTTP or HTTPS. An attacker that can trick a victim into visiting a malicious site while running MockServer locally, will be able to run arbitrary code on the MockServer machine. With an overly broad...

9.6CVSS2AI score0.02164EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2021/08/16 9:15 p.m.18 views

CVE-2021-32827

MockServer is open source software which enables easy mocking of any system you integrate with via HTTP or HTTPS. An attacker that can trick a victim into visiting a malicious site while running MockServer locally, will be able to run arbitrary code on the MockServer machine. With an overly broad...

9.6CVSS0.02164EPSS
Exploits1References2
CVE
CVE
added 2021/08/16 8:50 p.m.136 views

CVE-2021-32827

CVE-2021-32827 affects MockServer. The issue arises from a combination of an overly broad default CORS configuration and support for dynamic expectations via Javascript/Velocity templates , which may allow an attacker to perform script injection and arbitrary code execution on the MockServer host...

9.6CVSS8.1AI score0.02164EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder