CVE-2021-43766

HIGH 8.1CVE-2021-43766 · Published 25/08/2022 · updated 17/06/2026

In short

CVE-2021-43766 is a HIGH (CVSS 8.1) vulnerability affecting odyssey (odyssey project).
Chance of exploitation in the next 30 days (EPSS): 0.55%, higher than 46.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
odyssey odyssey_project	`= 1.1`	No fix yet

Description

Odyssey passes to server unencrypted bytes from man-in-the-middle When Odyssey is configured to use certificate Common Name for client authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption. This is similar to CVE-2021-23214 for PostgreSQL.

References

yandex/odyssey
postgresql.org/support/security/CVE-2021-23214 · Not Applicable

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free