Description

An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service.

Remediation

References

https://github.com/electerm/electerm/issues/1686

Related Vulnerabilities

CVE-2020-35491 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind

CVE-2021-21294 Vulnerability in maven package org.http4s:http4s-blaze-server_2.13

CVE-2022-31180 Vulnerability in npm package shescape

CVE-2022-46175 Vulnerability in maven package org.webjars.npm:json5

CVE-2020-20739 Vulnerability in npm package libvips

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Issue Tracking Patch Third Party Advisory NVD-CWE-noinfo