Emissary Security Vulnerabilities and Issues — Emissary CVE List

Lucene search

NsaEmissary

3 matches found

CVE•added 2021/05/07 4:15 a.m.•51 views

CVE-2021-32094

U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to upload arbitrary files.

8.8CVSS8.6AI score0.00517EPSS

CVE•added 2021/05/07 4:15 a.m.•45 views

CVE-2021-32095

U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to delete arbitrary files.

8.1CVSS7.9AI score0.00213EPSS

CVE•added 2021/05/07 4:15 a.m.•28 views

CVE-2021-32096

The ConsoleAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows a CSRF attack that results in injecting arbitrary Ruby code (for an eval call) via the CONSOLE_COMMAND_STRING parameter.

8.8CVSS8.7AI score0.00145EPSS