3 matches found
CVE-2021-38621
The remove API in v1/controller/cloudStorage/alibabaCloud/remove/index.ts in netless Agora Flat Server before 2021-07-30 mishandles file ownership...
9.1CVSS6.9AI score
SaveExploits0References1
Buffer overflow
The remove API in v1/controller/cloudStorage/alibabaCloud/remove/index.ts in netless Agora Flat Server before 2021-07-30 mishandles file ownership...
6.4CVSS9.1AI score0.00986EPSS
SaveExploits0References1Affected Software1
CVE-2021-38621
CVE-2021-38621 affects the Netless Agora Flat Server, specifically the remove API in v1/controller/cloudStorage/alibabaCloud/remove/index.ts. The vulnerability arises from mishandling file ownership in that endpoint, as reported across several sources (NVD, Red Hat, OSV, CVE listing). The entry i...
9.1CVSS9.2AI score0.00986EPSS
SaveExploits0References1Affected Software1
20