rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-3181 
rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending email messages with sequences of semicolon characters in RFC822 address fields (aka terminators of empty groups). A small email message from the attacker can cause large memory consumption, and the victim may then be unable to see email messages from other persons.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-19T14:30:37.000Z
CVE-2021-3182 
D-Link DCS-5220 devices have a buffer overflow. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-19T14:40:57.000Z
CVE-2021-3183 
Files.com Fat Client 3.3.6 allows authentication bypass because the client continues to have access after a logout and a removal of a login profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-19T14:58:10.000Z
CVE-2021-3184 
MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/global_menu.ctp user homepage favourite button.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-19T16:01:04.000Z
CVE-2021-3185 
A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution.
Problem types: cwe_id: CWE-120
description: CWE-120->CWE-121
Affected products: vendor: n/a
product: gstreamer
Published: 2021-01-25T16:33:15.000Z
CVE-2021-3186 
A Stored Cross-site scripting (XSS) vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47_multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-24T19:35:34.000Z
CVE-2021-3187 
An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script (that executes as root from a temporary directory) during install time. (This applies to macOS before 10.15.5, or Security Update 2020-003 on Mojave and High Sierra, Later versions of macOS are not vulnerable.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-11T00:00:00.000Z
CVE-2021-3188 
phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-21T06:54:34.000Z
CVE-2021-3189 
The slashify package 1.0.0 for Node.js allows open-redirect attacks, as demonstrated by a localhost:3000///example.com/ substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-19T22:24:31.000Z
CVE-2021-3190 
The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-21T07:11:33.000Z
CVE-2021-3191 
Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0952L01^AAR through T0952L01^AAX, and T0986L01^AAD through T0986L01^AAJ (L) and T0320H01^ABW through T0320H01^ACC, T0952H01^AAQ through T0952H01^AAW, and T0986H01^AAC through T0986H01^AAI (J and H).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-09T18:17:18.000Z
CVE-2021-3193 
Improper access and command validation in the Nagios Docker Config Wizard before 1.1.2, as used in Nagios XI through 5.7, allows an unauthenticated attacker to execute remote code as the apache user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-22T03:56:03.000Z
CVE-2021-3195 
bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpwallet RPC call. NOTE: this reportedly does not violate the security model of Bitcoin Core, but can violate the security model of a fork that has implemented dumpwallet restrictions
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-21T07:48:58.000Z
CVE-2021-3196 
An issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0 through 12.0.2, and 12.1.0. When using federated identity management (authenticating via SAML through a third-party identity provider), an attacker can inject additional data into a signed SAML response being transmitted to the service provider (ID Bravura Security Fabric). The application successfully validates the signed values but uses the unsigned malicious values. An attacker with lower-privilege access to the application can inject the username of a high-privilege user to impersonate that user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N
version: 3.1
Published: 2021-06-09T14:10:56.000Z
CVE-2021-3197 
An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-27T00:00:00.000Z
CVE-2021-3198 Ivanti MobileIron Core clish Restricted Shell Escape via OS Command Injection
By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.
Problem types: cwe_id: CWE-78
description: CWE-78 OS Command Injection
Affected products: vendor: Ivanti
product: MobileIron Core
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
version: 3.1
Credits: lang: en
value: William Vu of Rapid7
Published: 2021-07-22T18:27:20.123Z
CVE-2021-3199 
Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-22T02:41:34.000Z
CVE-2021-3200 
Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-18T16:14:25.000Z
CVE-2021-3204 
SSRF in the document conversion component of Webware Webdesktop 5.1.15 allows an attacker to read all files from the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-19T13:25:40.000Z
CVE-2021-3210 
components/Modals/HelpTexts/GenericAll/GenericAll.jsx in Bloodhound <= 4.0.1 allows remote attackers to execute arbitrary system commands when the victim imports a malicious data file containing JavaScript in the objectId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-19T13:06:42.000Z
CVE-2021-3223 
Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-26T05:58:52.000Z
CVE-2021-3224 
A stored cross-site scripting (XSS) vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-10T13:38:23.000Z
CVE-2021-3229 
Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.384_10177 and earlier versions allows an attacker to disrupt the use of device setup services via continuous login error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-05T21:36:48.000Z
CVE-2021-3236 
vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex_buffer_all method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2021-3239 
E-Learning System 1.0 suffers from an unauthenticated SQL injection vulnerability, which allows remote attackers to execute arbitrary code on the hosting web server and gain a reverse shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-15T20:39:34.000Z
CVE-2021-3242 
DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-16T19:29:38.000Z
CVE-2021-3243 
Wfilter ICF 5.0.117 contains a cross-site scripting (XSS) vulnerability. An attacker in the same LAN can craft a packet with a malicious User-Agent header to inject a payload in its logs, where an attacker can take over the system by through its plugin-running function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-15T16:48:00.000Z
CVE-2021-3246 
A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-20T00:00:00.000Z
CVE-2021-3252 
KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-23T14:15:32.000Z
CVE-2021-3254 
Asus DSL-N14U-B1 1.1.2.3_805 allows remote attackers to cause a Denial of Service (DoS) via a TCP SYN scan using nmap.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-11T11:55:04.000Z
CVE-2021-3256 
KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the html_url parameter of the chakanhtml.module.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-11T19:50:23.000Z
CVE-2021-3258 
Question2Answer Q2A Ultimate SEO Version 1.3 is affected by cross-site scripting (XSS), which may lead to arbitrary remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-05T15:38:18.000Z
CVE-2021-3262 
TripSpark VEO Transportation-2.2.x-XP_BB-20201123-184084 NovusEDU-2.2.x-XP_BB-20201123-184084 allows unsafe data inputs in POST body parameters from end users without sanitizing using server-side logic. It was possible to inject custom SQL commands into the "Student Busing Information" search queries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-29T00:00:00.000Z
CVE-2021-3264 
SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-27T18:06:30.000Z
CVE-2021-3267 
File Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the uploadFile function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2021-3271 
PressBooks 5.17.3 contains a cross-site scripting (XSS). Stored XSS can be submitted via the Book Info's Long Description Body, and all actions to open or preview the books page will result in the triggering the stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-22T17:08:20.000Z
CVE-2021-3272 
jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-27T07:29:02.000Z
CVE-2021-3273 
Nagios XI below 5.7 is affected by code injection in the /nagiosxi/admin/graphtemplates.php component. To exploit this vulnerability, someone must have an admin user account in Nagios XI's web system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-25T13:32:53.000Z
CVE-2021-3275 
Unauthenticated stored cross-site scripting (XSS) exists in multiple TP-Link products including WIFI Routers (Wireless AC routers), Access Points, ADSL + DSL Gateways and Routers, which affects TD-W9977v1, TL-WA801NDv5, TL-WA801Nv6, TL-WA802Nv5, and Archer C3150v2 devices through the improper validation of the hostname. Some of the pages including dhcp.htm, networkMap.htm, dhcpClient.htm, qsEdit.htm, and qsReview.htm and use this vulnerable hostname function (setDefaultHostname()) without sanitization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-26T12:21:23.000Z
CVE-2021-3277 
Nagios XI 5.7.5 and earlier allows authenticated admins to upload arbitrary files due to improper validation of the rename functionality in custom-includes component, which leads to remote code execution by uploading php files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-07T21:05:03.000Z
CVE-2021-3278 
Local Service Search Engine Management System 1.0 has a vulnerability through authentication bypass using SQL injection . Using this vulnerability, an attacker can bypass the login page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-25T15:09:00.000Z
CVE-2021-3279 
sz.chat version 4 allows injection of web scripts and HTML in the message box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-19T12:05:31.000Z
CVE-2021-3281 
In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with absolute paths or relative paths with dot segments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-02T06:16:28.000Z
CVE-2021-3282 
HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-01T15:38:48.000Z
CVE-2021-3283 
HashiCorp Nomad and Nomad Enterprise up to 0.12.9 exec and java task drivers can access processes associated with other tasks on the same node. Fixed in 0.12.10, and 1.0.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-01T15:36:18.000Z
CVE-2021-3285 
jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:N/S:U/UI:N
version: 3.1
Published: 2021-01-23T01:02:50.000Z
CVE-2021-3286 
SQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is inadequate, e.g., a variation of the payload may be used. NOTE: this issue exists because of an incomplete fix for CVE-2020-35545.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-24T08:41:02.000Z
CVE-2021-3287 
Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-22T12:58:00.000Z
CVE-2021-3291 
Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-26T06:47:35.000Z
CVE-2021-3293 
emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-08T14:17:53.000Z
CVE-2021-3294 
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a cookie to perform user redirection to a malicious website.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-08T23:54:38.000Z
CVE-2021-3297 
On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-26T07:11:41.000Z
CVE-2021-3298 
Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-29T05:27:59.000Z
CVE-2021-3304 
Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-26T06:05:15.000Z
CVE-2021-3305 
Beijing Feishu Technology Co., Ltd Feishu v3.40.3 was discovered to contain an untrusted search path vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-18T00:00:00.000Z
CVE-2021-3308 
An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-26T19:58:23.000Z
CVE-2021-3309 
packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Authority trust store,
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-26T20:13:54.000Z
CVE-2021-3310 
Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure (by reading local files).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-10T04:55:35.000Z
CVE-2021-3311 
An issue was discovered in October through build 471. It reactivates an old session ID (which had been invalid after a logout) once a new login occurs. NOTE: this violates the intended Auth/Manager.php authentication behavior but, admittedly, is only relevant if an old session ID is known to an attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-05T04:47:53.000Z
CVE-2021-3312 
An XML external entity (XXE) vulnerability in Alkacon OpenCms 11.0, 11.0.1 and 11.0.2 allows remote authenticated users with edit privileges to exfiltrate files from the server's file system by uploading a crafted SVG document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-08T14:44:58.000Z
CVE-2021-3313 
Plone CMS until version 5.2.4 has a stored Cross-Site Scripting (XSS) vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when being echoed back to the user. This data can be interpreted as executable code by the browser and allows an attacker to execute JavaScript in the context of the victim's browser if the victim opens a vulnerable page containing an XSS payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-20T15:34:13.000Z
CVE-2021-3314 
Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS. A malicious user can cause an administrator user to supply dangerous content to the vulnerable page, which is then reflected back to the user and executed by the web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that is posted publicly or e-mailed directly to victims. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-25T15:16:11.000Z
CVE-2021-3315 
In JetBrains TeamCity before 2020.2.2, stored XSS on a tests page was possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T11:57:32.000Z
CVE-2021-3317 
KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of the source parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-26T22:33:58.000Z
CVE-2021-3318 
attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-27T17:13:04.000Z
CVE-2021-3319 DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses
DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions >= > v2.4.0 contain NULL Pointer Dereference (CWE-476), Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94jg-2p6q-5364
Problem types: cwe_id: CWE-476
description: NULL Pointer Dereference (CWE-476)
cwe_id: CWE-588
description: Attempt to Access Child of a Non-structure Pointer (CWE-588)
Affected products: vendor: zephyrproject-rtos
product: zephyr
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
version: 3.1
Published: 2021-10-05T20:50:14.254Z