Lucene search
Veracode Vulnerability DatabaseVERACODE:33490HistoryDec 30, 2021 - 2:50 a.m.
Stored Command Injection
2021-12-3002:50:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.002 Low
EPSS
Percentile
62.1%
celery is vulnerable to stored command injection attacks. The vulnerability exists due to lack of input sanitization which allows an attacker to inject and execute malicious commands via base.py.
| CPE | Name | Operator | Version |
|---|---|---|---|
| celery | le | 5.2.1 | |
| celery:sid | eq | 5.0.0-3 | |
| celery | le | 5.2.1 | |
| celery:sid | eq | 5.0.0-3 |
Related
fedora
fedora
[SECURITY] Fedora 35 Update: python-kombu-5.2.3-1.fc35
2022-01-16 01:20:49
[SECURITY] Fedora 35 Update: python-celery-5.2.3-2.fc35
2022-01-16 01:20:48
prion
prion
Command injection
2021-12-29 17:15:00
freebsd
freebsd
py39-celery -- command injection vulnerability
2021-12-09 00:00:00
mageia
mageia
Updated python-celery packages fix security vulnerability
2022-01-25 15:13:11
github
github
OS Command Injection in celery
2022-01-06 22:22:02
nessus
nessus
osv
osv
OS Command Injection in celery
2022-01-06 22:22:02
PYSEC-2021-858
2021-12-29 17:15:00
CVE-2021-23727
2021-12-29 17:15:07
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0029)
2022-01-28 00:00:00
Fedora: Security Advisory for python-celery (FEDORA-2022-1dae017601)
2022-01-16 00:00:00
Fedora: Security Advisory for python-kombu (FEDORA-2022-1dae017601)
2022-01-16 00:00:00
cve
cve
CVE-2021-23727
2021-12-29 17:15:07
debiancve
debiancve
CVE-2021-23727
2021-12-29 17:15:07
cvelist
cvelist
CVE-2021-23727 Stored Command Injection
2021-12-29 00:00:00
redhatcve
redhatcve
CVE-2021-23727
2022-01-05 20:54:40
nvd
nvd
CVE-2021-23727
2021-12-29 17:15:07
cnvd
cnvd
celery command injection vulnerability
2021-12-30 00:00:00
ibm
ibm
ubuntucve
ubuntucve
CVE-2021-23727
2021-12-29 00:00:00