rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-36722 Emuse - eServices / eNvoice SQL injection
Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dumping the whole database to full RCE on the affected endpoints. The SQLi caused by CWE-209: Generation of Error Message Containig Sensetive Information, showing parts of the aspx code and the webroot location , information an attacker can leverage to further compromise the host.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Emuse
product: eServices / eNvoice
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
version: 3.1
Credits: lang: en
value: Simon Kenin - ClearSky Cyber Security Ltd.
Published: 2021-12-29T14:13:38.766Z
CVE-2021-36723 Emuse - eServices / eNvoice Exposure Of Private Personal Information
Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predictable IDs an attacker can scrape all the files on the service.
Problem types: cwe_id: CWE-359
description: CWE-359 Exposure of Private Information ('Privacy Violation')
Affected products: vendor: Emuse
product: eServices / eNvoice
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
version: 3.1
Credits: lang: en
value: Simon Kenin - ClearSky Cyber Security Ltd.
Published: 2021-12-29T14:12:48.982Z
CVE-2021-36724 ForeScout - SecureConnector Local Service DoS
ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the secure connector service writes a large amount of characters in the installationPath. This will cause the buffer to overflow and override the stack cookie causing the service to crash.
Problem types: description: Local Service DoS
Affected products: vendor: ForeScout
product: eServices / eNvoice
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
version: 3.1
Credits: lang: en
value: Alex Katziv - Novartis
Published: 2021-12-29T17:02:42.726Z
CVE-2021-36737 XSS in V3 Demo Portlet
The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the v3-demo-portlet.war artifact
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Apache Software Foundation
product: Apache Portals
Credits: lang: en
value: Thanks to Dhiraj Mishra for reporting.
Published: 2022-01-06T08:50:13.000Z
CVE-2021-36738 XSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet
The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Apache Software Foundation
product: Apache Portals
Published: 2022-01-06T08:50:15.000Z
CVE-2021-36739 XSS vulnerability in the MVCBean JSP portlet maven archetype
The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting (XSS) attacks.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Apache Software Foundation
product: Apache Portals
Published: 2022-01-06T08:50:16.000Z
CVE-2021-36740 
Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This affects Varnish Enterprise 6.0.x before 6.0.8r3, and Varnish Cache 5.x and 6.x before 6.5.2, 6.6.x before 6.6.1, and 6.0 LTS before 6.0.8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-14T16:07:28.000Z
CVE-2021-36741 
An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the product�s management console in order to exploit this vulnerability.
Problem types: description: Arbitrary File Upload
Affected products: vendor: Trend Micro
product: Trend Micro Apex One
vendor: Trend Micro
product: Trend Micro OfficeScan
vendor: Trend Micro
product: Trend Micro Worry-Free Business Security
Published: 2021-07-29T19:23:13.000Z
CVE-2021-36742 
A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Problem types: description: Local Privilege Escalation
Affected products: vendor: Trend Micro
product: Trend Micro Apex One
vendor: Trend Micro
product: Trend Micro OfficeScan
vendor: Trend Micro
product: Trend Micro Worry-Free Business Security
Published: 2021-07-29T19:23:14.000Z
CVE-2021-36744 
Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escalate privileges and create a denial of service.
Problem types: description: Directory Junction Denial-of-Service
Affected products: vendor: Trend Micro
product: Trend Micro Security (Consumer)
Published: 2021-09-06T11:37:47.000Z
CVE-2021-36745 
A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations.
Problem types: description: Authentication Bypass
Affected products: vendor: Trend Micro
product: Trend Micro ServerProtect for Storage
vendor: Trend Micro
product: Trend Micro ServerProtect for EMC Celerra
vendor: Trend Micro
product: Trend Micro ServerProtect for Network Appliance Filers
vendor: Trend Micro
product: Trend Micro ServerProtect for Microsoft Windows / Novell Netware
Published: 2021-09-29T10:21:30.000Z
CVE-2021-36746 
Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-20T20:48:18.000Z
CVE-2021-36747 
Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-20T20:44:23.000Z
CVE-2021-36748 
A SQL Injection issue in the list controller of the Prestahome Blog (aka ph_simpleblog) module before 1.7.8 for Prestashop allows a remote attacker to extract data from the database via the sb_category parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-20T17:30:34.000Z
CVE-2021-36749 Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended (incomplete fix of CVE-2021-26920)
In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of the Druid server process. This is not an elevation of privilege when users access Druid directly, since Druid also provides the Local InputSource, which allows the same level of access. But it is problematic when users interact with Druid indirectly through an application that allows users to specify the HTTP InputSource, but not the Local InputSource. In this case, users could bypass the application-level restriction by passing a file URL to the HTTP InputSource. This issue was previously mentioned as being fixed in 0.21.0 as per CVE-2021-26920 but was not fixed in 0.21.0 or 0.21.1.
Problem types: description: Data accessible to unathorized parties
Affected products: vendor: Apache Software Foundation
product: Apache Druid
Credits: lang: en
value: This issue was originally discovered by chybeta from the Security Team of Alibaba Cloud.
lang: en
value: ABKing and g0udan from the Security Team of Xiaomi discovered that it was still an issue after CVE-2021-26920.
Published: 2021-09-24T09:30:11.000Z
CVE-2021-36750 
ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users (across USB drives sold under multiple brand names).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T13:40:32.000Z
CVE-2021-36751 
ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation (without knowledge of the key). This is called ciphertext malleability. There is no data integrity mechanism to detect this manipulation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-02T00:00:00.000Z
CVE-2021-36753 
sharkdp BAT before 0.18.2 executes less.exe from the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-15T19:07:08.000Z
CVE-2021-36754 
PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE 65535) that causes an out-of-bounds exception.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T05:35:37.000Z
CVE-2021-36755 
Nightscout Web Monitor (aka cgm-remote-monitor) 14.2.2 allows XSS via a crafted X-Forwarded-For header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-15T23:01:50.000Z
CVE-2021-36756 
CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-27T14:26:00.000Z
CVE-2021-36758 
1Password Connect server before 1.2 is missing validation checks, permitting users to create Secrets Automation access tokens that can be used to perform privilege escalation. Malicious users authorized to create Secrets Automation access tokens can create tokens that have access beyond what the user is authorized to access, but limited to the existing authorizations of the Secret Automation the token is created in.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-15T23:14:00.000Z
CVE-2021-36760 
In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS attack affecting the callback parameter modifying the URL that precedes the callback parameter. Once the username or password reset procedure is completed, the JavaScript code will be executed. (recoverpassword.do also has an open redirect issue for a similar reason.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-07T20:48:56.000Z
CVE-2021-36761 
The GeoAnalytics feature in Qlik Sense April 2020 patch 4 allows SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-21T16:07:30.000Z
CVE-2021-36762 
An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd():tftpsrv.c TFTP packet processing function doesn't ensure that a filename is adequately '\0' terminated; therefore, a subsequent call to strlen for the filename might read out of bounds of the protocol packet buffer (if no '\0' byte exists within a reasonable range).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-19T11:09:58.000Z
CVE-2021-36763 
In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-03T15:49:10.000Z
CVE-2021-36764 
In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted communication requests may cause a Null pointer dereference in the affected CODESYS products and may result in a denial-of-service condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-04T13:35:31.000Z
CVE-2021-36765 
In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests may cause a null pointer dereference in the downloaded vulnerable EtherNet/IP stack that is executed by the CODESYS Control runtime system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-04T13:22:18.000Z
CVE-2021-36766 
Concrete5 through 8.5.5 deserializes Untrusted Data. The vulnerable code is located within the controllers/single_page/dashboard/system/environment/logging.php Logging::update_logging() method. User input passed through the logFile request parameter is not properly sanitized before being used in a call to the file_exists() PHP function. This can be exploited by malicious users to inject arbitrary PHP objects into the application scope (PHP Object Injection via phar:// stream wrapper), allowing them to carry out a variety of attacks, such as executing arbitrary PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T05:38:42.000Z
CVE-2021-36767 
In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective. An attacker may send an unauthenticated request to the server. The server will reply with a weakly-hashed version of the server's access password. The attacker may then crack this hash offline in order to successfully login to the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-08T14:22:57.000Z
CVE-2021-36769 
A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacker can cause the server to receive messages in a different order than they were sent a client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-16T23:03:50.000Z
CVE-2021-36770 
Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library (in the current working directory) that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm (3.05 through 3.11). This issue occurs because the || operator evaluates @INC in a scalar context, and thus @INC has only an integer value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-11T22:49:04.000Z
CVE-2021-36771 
Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-17T18:13:48.000Z
CVE-2021-36772 
Zoho ManageEngine ADManager Plus before 7110 allows stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-17T18:13:39.000Z
CVE-2021-36773 
uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to cause a denial of service (unbounded recursion that can trigger memory consumption and a loss of all blocking functionality).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-18T03:34:06.000Z
CVE-2021-36774 Mysql JDBC Connector Deserialize RCE
Apache Kylin allows users to read data from other database systems using JDBC. The MySQL JDBC driver supports certain properties, which, if left unmitigated, can allow an attacker to execute arbitrary code from a hacker-controlled malicious MySQL server within Kylin server processes. This issue affects Apache Kylin 2 version 2.6.6 and prior versions; Apache Kylin 3 version 3.1.2 and prior versions.
Problem types: description: remote command/code execute
Affected products: vendor: Apache Software Foundation
product: Apache Kylin
Credits: lang: en
value: jinchen sheng <jincsheng@gmail.com>
Published: 2022-01-06T12:35:20.000Z
CVE-2021-36775 Deleting PRTBs associated to a group doesn't cause deletion of corresponding RoleBindings
a Improper Access Control vulnerability in SUSE Rancher allows users to keep privileges that should have been revoked. This issue affects: SUSE Rancher Rancher versions prior to 2.4.18; Rancher versions prior to 2.5.12; Rancher versions prior to 2.6.3.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: SUSE
product: Rancher
vendor: SUSE
product: Rancher
vendor: SUSE
product: Rancher
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2022-04-01T07:40:11.706Z
CVE-2021-36776 Steve API proxy impersonation
A Improper Access Control vulnerability in SUSE Rancher allows remote attackers impersonate arbitrary users. This issue affects: SUSE Rancher Rancher versions prior to 2.5.10.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: SUSE
product: Rancher
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2022-04-01T07:40:13.289Z
CVE-2021-36777 login-proxy sends password to attacker-provided domain
A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service allowed attackers to present users with a expected login form that then sends the clear text credentials to an attacker specified server. This issue affects: openSUSE Build service login-proxy-scripts versions prior to dc000cdfe9b9b715fb92195b1a57559362f689ef.
Problem types: cwe_id: CWE-807
description: CWE-807: Reliance on Untrusted Inputs in a Security Decision
Affected products: vendor: openSUSE
product: Build service
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
version: 3.1
Credits: lang: en
value: Bernhard Wiedemann, Victor Pereira and Marcus Rueckert of SUSE
Published: 2022-03-09T16:26:18.323Z
CVE-2021-36778 Exposure of repository credentials to external third-party sources
A Incorrect Authorization vulnerability in SUSE Rancher allows administrators of third-party repositories to gather credentials that are sent to their servers. This issue affects: SUSE Rancher Rancher versions prior to 2.5.12; Rancher versions prior to 2.6.3.
Problem types: cwe_id: CWE-863
description: CWE-863: Incorrect Authorization
Affected products: vendor: SUSE
product: Rancher
vendor: SUSE
product: Rancher
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 7.3
baseSeverity: HIGH
Credits: lang: en
value: Avatar Martin Andreas Ullrich
Published: 2022-05-02T07:05:12.716Z
CVE-2021-36779 Host operations allowed in privileged Longhorn managed pods
A Missing Authentication for Critical Function vulnerability in SUSE Longhorn allows any workload in the cluster to execute any binary present in the image on the host without authentication. This issue affects: SUSE Longhorn longhorn versions prior to 1.1.3; longhorn versions prior to 1.2.3.
Problem types: cwe_id: CWE-306
description: CWE-306: Missing Authentication for Critical Function
Affected products: vendor: SUSE
product: Longhorn
vendor: SUSE
product: Longhorn
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
attackVector: ADJACENT_NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 9.6
baseSeverity: CRITICAL
Credits: lang: en
value: Dagan Henderson and Will Kline
Published: 2021-12-17T08:55:13.033Z
CVE-2021-36780 Unauthorized data access from replicas through vulnerable instance manager pods
A Missing Authentication for Critical Function vulnerability in longhorn of SUSE Longhorn allows attackers to connect to a longhorn-engine replica instance granting it the ability to read and write data to and from a replica that they should not have access to. This issue affects: SUSE Longhorn longhorn versions prior to 1.1.3; longhorn versions prior to 1.2.3v.
Problem types: cwe_id: CWE-306
description: CWE-306: Missing Authentication for Critical Function
Affected products: vendor: SUSE
product: Longhorn
vendor: SUSE
product: Longhorn
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
attackVector: ADJACENT_NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
baseScore: 8.1
baseSeverity: HIGH
Credits: lang: en
value: Dagan Henderson and Will Kline
Published: 2021-12-17T08:55:14.523Z
CVE-2021-36781 parsec: dangerous 777 permissions for /run/parsec
A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or clients talking to an imposter service. This issue affects: openSUSE Factory parsec versions prior to 0.8.1-1.1.
Problem types: cwe_id: CWE-276
description: CWE-276: Incorrect Default Permissions
Affected products: vendor: openSUSE
product: Factory
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Matthias Gerstner of SUSE
Published: 2022-01-14T10:40:09.442Z