Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-23422— Arbitrary Code Injection

CVSS 7.8 · High EPSS 0.20% · P42
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-23422

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Arbitrary Code Injection
Source: NVD (National Vulnerability Database)
Vulnerability Description
This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing Inline Tag Command metadata is processed. When an arbitrary OS command is executed, the command output would be included in the HTML output.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
bikeshed 操作系统命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
bikeshed是一个规范文档的预处理器，将源文档（仅包含实际规范内容，加上一些用于链接术语和其他内容的速记）转换为最终规范文档，其中包含适当的样板、参考书目、索引等。 bikeshed 3.0.0 之前版本存在安全漏洞，当处理包含Inline Tag Command metadata的不受信任的源文件时，可能会触发漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-bikeshed unspecified ~ 3.0.0 -

II. Public POCs for CVE-2021-23422

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-23422

请登录查看更多情报信息。

Same Patch Batch · n/a · 2021-08-16 · 39 CVEs total

CVE-2021-234235.5 MEDIUMDirectory Traversal
CVE-2021-35393Realtek Jungle SDK 缓冲区错误漏洞
CVE-2021-38757Hospital Management System 跨站脚本漏洞
CVE-2021-38756Hospital Management System 跨站脚本漏洞
CVE-2021-38755Hospital Management System 安全漏洞
CVE-2021-38754HealthNode Hospital Management System SQL注入漏洞
CVE-2021-38753Simple Image Gallery Web App 代码问题漏洞
CVE-2021-38752Online-Catering-Reservation 跨站脚本漏洞
CVE-2021-38751ExponentCMS安全漏洞
CVE-2021-38607Crocoblock JetEngine 跨站脚本漏洞
CVE-2021-35392Realtek Jungle SDK 缓冲区错误漏洞
CVE-2021-38758Online Catering Reservation System 输入验证错误漏洞
CVE-2021-35394Realtek Jungle SDK 安全漏洞
CVE-2021-35395Realtek Jungle SDK 安全漏洞
CVE-2021-38712OneNav 安全漏洞
CVE-2021-38713imgurl跨站脚本漏洞
CVE-2021-38711gitit 安全漏洞
CVE-2021-38708Ocproducts Composr CMS 跨站脚本漏洞
CVE-2021-38709Ocproducts Composr CMS 跨站脚本漏洞
CVE-2021-22933Pulse Secure Pulse Connect Secure 路径遍历漏洞

Showing top 20 of 39 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: bikeshed
Same vendor: n/a

V. Comments for CVE-2021-23422

No comments yet

Leave a comment