Beveiligingsadvies

CVE-2021-28154

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-03-11 21:14:43

Laatst bijgewerkt 2024-08-03 21:40:12

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Camunda Modeler (aka camunda-modeler) through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it does not allow any remote scripts to be opened, no unsafe scripts to be evaluated, no remote sites to be browsed.

← Alle CVE's bekijken Bekijk op cve.org ↗