Lucene search
+L

2 matches found

NVD
NVD
added 2021/03/11 10:15 p.m.29 views

CVE-2021-28154

Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...

9.1CVSS0.01481EPSS
SaveExploits1References1
OSV
OSV
added 2021/03/11 10:15 p.m.8 views

CVE-2021-28154

Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...

9.1CVSS7AI score
SaveExploits0References1
Rows per page
Query Builder