CVE-2021-32305
82Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 87%
from disclosure to weapon34 days
Published on NVDMay 18
1st PoC+34d
VulnCheck+104d
exploitation probability
87%top 1% of all CVEs
observed exploitation
yesVulnCheck
5 public exploit(s)
What the vendors declare (VEX)
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Red HatVEX document ↗
Not affected
1 product — because the vulnerable code is not present in the product
red_hat_products
WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.
Affected products
n/a · n/apublic PoCs found — 5✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/50042githubgithub.com/FredBrave/CVE-2021-32305-websvn-2.6.0★ 1githubgithub.com/sz-guanx/CVE-2021-32305★ 0cve_referencepacketstormsecurity.com/files/163225/Websvn-2.6.0-Remote-Code-Execution.htmlunverifiedvulncheckvulncheck.com/xdb/8ca1d56a1fdaunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.