CVE-2021-32095

Mô tả

Tham khảo

• blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed · Third Party Advisory
• portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover · Third Party Advisory

Lỗ hổng khác của emissary

• CVE-2026-35582CAO 8.8Emissary is a P2P based data-driven workflow engine. In versions 8.42.0 and below, Executrix.getCommand() is vulnerable to OS command inject…
• CVE-2026-35583TRUNG BÌNH 5.3Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, the configuration API endpoint (/api/configuration/{name}) validated c…
• CVE-2026-35581CAO 7.2Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, the Executrix utility class constructed shell commands by concatenatin…
• CVE-2026-35580NGHIÊM TRỌNG 9.1Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workflow files contained shell injection points where u…
• CVE-2026-35571TRUNG BÌNH 4.8Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, Mustache navigation templates interpolated configuration-controlled li…