CVE-2021-28154

{"id": "CVE-2021-28154", "cveTags": [{"tags": ["disputed"], "sourceIdentifier": "cve@mitre.org"}], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "published": "2021-03-11T22:15:12.857", "references": [{"url": "https://github.com/camunda/camunda-modeler/issues/2143", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "Camunda Modeler (aka camunda-modeler) through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states \"The way we secured the app is that it does not allow any remote scripts to be opened, no unsafe scripts to be evaluated, no remote sites to be browsed."}, {"lang": "es", "value": "** En DISPUTA ** Camunda Modeler (tambi\u00e9n se conoce como camunda-modeler) versiones hasta 4.6.0, permite un acceso arbitrario a archivos. Un atacante remoto puede enviar un mensaje IPC dise\u00f1ado a la interfaz IPC ipcRenderer vulnerable expuesta, que manipula las API readFile y writeFile. NOTA: el proveedor afirma \"La manera en que aseguramos la aplicaci\u00f3n es que no permite que se abran scripts remotos, no se eval\u00faen scripts no seguros, no se naveguen sitios remotos\""}], "lastModified": "2024-08-03T22:15:24.443", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:camunda:modeler:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E8FC2A3-2C9A-48E2-A874-9D63E2CB0E20", "versionEndIncluding": "4.6.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}