CVE-2021-4304

CRITICO 9.8CVE-2021-4304 · Published 05/01/2023 · updated 17/06/2026

In breve

CVE-2021-4304 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda ulcc-core (ulcc-core project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.2%, superiore al 82.3% delle vulnerabilità.
Correzione: aggiornare a 2021-02-05 o successiva.

Package	Affected versions	Patched versions
ulcc-core ulcc-core_project	`< 2021-02-05`	`2021-02-05`

Description

A vulnerability was found in eprintsug ulcc-core. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file cgi/toolbox/toolbox. The manipulation of the argument password leads to command injection. The attack can be launched remotely. The patch is named 811edaae81eb044891594f00062a828f51b22cb1. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217447.

References

eprintsug/ulcc-core commit 811edaa · Patch
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free