CVE-2021-4430

HOCH 7.5CVE-2021-4430 · Published 06/11/2023 · updated 17/06/2026

Kurz gesagt

CVE-2021-4430 ist eine Schwachstelle (HOCH (CVSS 7.5)) in coldbox elixir (ortussolutions).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.71%, höher als bei 53.8% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
coldbox elixir ortussolutions	`= 3.1.6`	No fix yet

Description

A vulnerability classified as problematic has been found in Ortus Solutions ColdBox Elixir 3.1.6. This affects an unknown part of the file src/defaultConfig.js of the component ENV Variable Handler. The manipulation leads to information disclosure. Upgrading to version 3.1.7 is able to address this issue. The identifier of the patch is a3aa62daea2e44c76d08d1eac63768cd928cd69e. It is recommended to upgrade the affected component. The identifier VDB-244485 was assigned to this vulnerability.

References

Ortus-Solutions/coldbox-elixir commit a3aa62d · Patch
Ortus-Solutions/coldbox-elixir release v3.1.7 · Release Notes
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free