Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/27 12:00 a.m.•4 views

CVE-2021-3148: Improper Neutralization of Special Elements used in a Command

An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.genthin command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py...

9.8CVSS8.2AI score0.08246EPSS
SaveExploits0References2
Rows per page
Query Builder