← voltar
CVE-2021-32093

CVE-2021-32093

EPSS 1.0%
The ConfigFileAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to read arbitrary files via the ConfigName parameter.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealedhttps://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover