CVE-2021-4281

A vulnerability was found in Brave UX for-the-badge and classified as critical. Affected by this issue is some unknown functionality of the file .github/workflows/combine-prs.yml. The manipulation leads to os command injection. The name of the patch is 55b5a234c0fab935df5fb08365bc8fe9c37cf46b. It is recommended to apply a patch to fix this issue. VDB-216842 is the identifier assigned to this vulnerability.

• CWE-78

• https://github.com/BraveUX/for-the-badge/commit/55b5a234c0fab935df5fb08365bc8fe9c37cf46bPatch, Third Party Advisory
• https://github.com/BraveUX/for-the-badge/pull/165Third Party Advisory
• https://vuldb.com/?ctiid.216842Permissions Required, Third Party Advisory
• https://vuldb.com/?id.216842Permissions Required, Third Party Advisory
• https://github.com/BraveUX/for-the-badge/commit/55b5a234c0fab935df5fb08365bc8fe9c37cf46bPatch, Third Party Advisory
• https://github.com/BraveUX/for-the-badge/pull/165Third Party Advisory
• https://vuldb.com/?ctiid.216842Permissions Required, Third Party Advisory
• https://vuldb.com/?id.216842Permissions Required, Third Party Advisory

Published

Dec 26, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-42794An issue was discovered in AVEVA Edge (formerly InduSoft Web…5.3
• CVE-2021-42796An issue was discovered in ExecuteCommand() in AVEVA Edge (f…9.8
• CVE-2021-42797Path traversal vulnerability in AVEVA Edge (formerly InduSof…7.5
• CVE-2021-4280A vulnerability was found in styler_praat_scripts. It has be…6.5
• CVE-2021-42808Improper Access Control in Thales Sentinel Protection Instal…6.7
• CVE-2021-42809Improper Access Control of Dynamically-Managed Code Resource…7.8
• CVE-2021-42810A flaw in the previous versions of the product may allow an …7.8
• CVE-2021-42811Improper Limitation of a Pathname to a Restricted Directory …6.5
• CVE-2021-4282A vulnerability was found in FreePBX voicemail. It has been …6.1
• CVE-2021-4283A vulnerability was found in FreeBPX voicemail. It has been …5.4
• CVE-2021-42833A Use of Hardcoded Credentials vulnerability exists in AquaV…8.8
• CVE-2021-42835An issue was discovered in Plex Media Server through 1.24.4.…7