CVE-2021-29357

HOCH 8.6CVE-2021-29357 · Published 12/04/2021 · updated 17/06/2026

Kurz gesagt

CVE-2021-29357 ist eine Schwachstelle (HOCH (CVSS 8.6)) in lifetime management console (outsystems), outsystems (outsystems), platform server (outsystems).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.99%, höher als bei 62.6% aller Schwachstellen.
Abhilfe: auf 11.7.0, 10.0.1104.0, 11.9.0 oder neuer aktualisieren.

Package	Affected versions	Patched versions
lifetime management console outsystems	`≥ 11, < 11.7.0`	`11.7.0`
outsystems outsystems	`≥ 10, < 10.0.1104.0`	`10.0.1104.0`
platform server outsystems	`≥ 11, < 11.9.0`	`11.9.0`

Description

The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 (and LifeTime management console before 11.7.0) allows SSRF for arbitrary outbound HTTP requests.

References

labs.integrity.pt/advisories/cve-2021-29357 · Third Party Advisory
success.outsystems.com/Support/Security/Vulnerabilities/Vulnerability_RTAF-2226 · Vendor Advisory

Weitere Schwachstellen in lifetime management console

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free