CVE-2021-29133

MEDIUM 5.5CVE-2021-29133 · Published 24/03/2021 · updated 17/06/2026

In short

CVE-2021-29133 is a MEDIUM (CVSS 5.5) vulnerability affecting haserl (haserl project).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.4% of all vulnerabilities.
Fix: update to 0.9.36 or later.

Package	Affected versions	Patched versions
haserl haserl_project	`< 0.9.36`	`0.9.36`

Description

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem.

References

rapid7/metasploit-framework#14833 · Exploit
rapid7/metasploit-framework#14833 · Patch
gitlab.alpinelinux.org/alpine/aports/-/issues/12539 · Issue Tracking
twitter.com/steaIth/status/1364940271054712842 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free