ITRS Group monitor-ninja har 2021.11.1 scheduled_reports.php SQL Injection
| CVSS Meta Temp Score | Garga na exploit ndiyam (≈) | CTI Nganji Score |
|---|---|---|
| 6.9 | $0-$5k | 0.10 |
Gunduma
Wuro vulnerability wey an yi classify sey kura an gano shi a cikin ITRS Group monitor-ninja har 2021.11.1. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, modules/reports/models/scheduled_reports.php na cikin fayil, $software_component na cikin sashi. Ngam manipulation shi SQL Injection. Wannan rauni ana sayar da shi da suna CVE-2021-4336. Ba exploit ɗin da ake da shi. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a hokkata. If you want to get best quality of vulnerability data, you may have to visit VulDB.
Furɗe
Wuro vulnerability wey an yi classify sey kura an gano shi a cikin ITRS Group monitor-ninja har 2021.11.1. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, modules/reports/models/scheduled_reports.php na cikin fayil, $software_component na cikin sashi. Ngam manipulation shi SQL Injection. CWE shidin ka a yi bayani matsala sai ya kai CWE-89. Gaskiya, laifi an fitar da shi 09/29/2021 a matsayin 6da9080faec9bca1ca5342386c0421dca0a6c0cc. Advisory ɗin ana rabawa don saukewa a github.com.
Wannan rauni ana sayar da shi da suna CVE-2021-4336. Tekinikal bayani ga. Wannan vulnerability ɗin ba shi da yawa sosai. Ba exploit ɗin da ake da shi. A sa'i, exploit might be approx. USD $0-$5k ndiyam.
Á wúro a wondi feere. Kama 0-day, an ndiyam a wuro be $0-$5k.
Patch ɗin sunan ganowa shine 6da9080faec9bca1ca5342386c0421dca0a6c0cc. Gyaran matsalar yana nan a shirye don saukewa a github.com. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a hokkata. Advisory ɗin nan na da wannan bayanin:
This escapes a bunch of variables used in SQL statements, which could otherwise be used to perform SQL injection attacks.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Kayan
Ngilabe
Sunu
Furɗe
Laisens
CPE 2.3
CPE 2.2
CVSSv4
VulDB Furɗo: 🔍VulDB Gaskiya: 🔍
CVSSv3
VulDB Meta Base Score: 6.9VulDB Meta Temp Score: 6.9
VulDB Ganda Borno: 5.5
VulDB Temp Score: 5.3
VulDB Furɗo: 🔍
VulDB Gaskiya: 🔍
NVD Ganda Borno: 9.8
NVD Furɗo: 🔍
CNA Ganda Borno: 5.5
CNA Furɗo (VulDB): 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vektar | Kumpleksiti | Authentisierung | Kariyandi | Gaskiya | Gashina |
|---|---|---|---|---|---|
| furu | furu | furu | furu | furu | furu |
| furu | furu | furu | furu | furu | furu |
| furu | furu | furu | furu | furu | furu |
VulDB Ganda Borno: 🔍
VulDB Temp Score: 🔍
VulDB Gaskiya: 🔍
NVD Ganda Borno: 🔍
Gargajiya
Klasu: SQL InjectionCWE: CWE-89 / CWE-74 / CWE-707
CAPEC: 🔍
ATT&CK: 🔍
Fizikal: Ayi
Gumti: Ayi
Gana: Ee
Gashina: 🔍
Halitta: A wondi feere
Google Hack: 🔍
EPSS Score: 🔍
EPSS Percentile: 🔍
Furɗo farashi: 🔍
Gaskiya farashi ndiyam: 🔍
| 0-Day | furu | furu | furu | furu |
|---|---|---|---|---|
| Lale | furu | furu | furu | furu |
Bayani na barazana
Ngam: 🔍Akteɓe ɓernde: 🔍
Kura APT goruwa masu aiki: 🔍
Kari gamji
Garga: GargajiyaHalitta: 🔍
Garga waaji: 🔍
0-Day Gana: 🔍
Lokon Gana: 🔍
Gargajiya: monitor-ninja 2021.11.30
Kari: 6da9080faec9bca1ca5342386c0421dca0a6c0cc
Waktin layi
09/29/2021 🔍09/29/2021 🔍
05/27/2023 🔍
05/27/2023 🔍
06/21/2023 🔍
Ngizim
Gargaaji: 6da9080faec9bca1ca5342386c0421dca0a6c0ccHalitta: Gaskiya
CVE: CVE-2021-4336 (🔍)
GCVE (CVE): GCVE-0-2021-4336
GCVE (VulDB): GCVE-100-230084
Gumti
Súgá: 05/27/2023 09:53Gargadi: 06/21/2023 13:11
Goyarwa: 05/27/2023 09:53 (45), 06/21/2023 13:03 (2), 06/21/2023 13:11 (28)
Gadankam: 🔍
Cache ID: 253:E70:103
A ga wuroyo kulu. Kàlàmbe: kr + en.
Ngam loga ka, kanyi shidin dum.