CVE-2021-43456

Katalog CVE

CVSS 7.8 · High EPSS 0,45%

Kerentanan Unquoted Search Path or Element pada rumble mail server project rumble mail server. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

An Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a specially crafted file in the RumbleService executable service path.

Rincian

Terbit di NVD

4 April 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-428: Unquoted Search Path or Element

EPSS (30 hari)

0,45% peluang dieksploitasi; lebih tinggi dari 37,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://exchange.xforce.ibmcloud.com/vulnerabilities/192729 advisory pihak ketiga · vdb entry
• https://github.com/M507/Miner advisory pihak ketiga
• https://www.exploit-db.com/exploits/49203 exploit · advisory pihak ketiga · vdb entry