CVE-2021-45851
Last modified
CVE-2021-45851 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the server's internal environment and services, often potentially leading to the attacker executing commands on the server.. EPSS estimates a 1.43% chance of exploitation in the next 30 days.
Description
A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the server's internal environment and services, often potentially leading to the attacker executing commands on the server.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Frangoteam | Fuxa | 1.1.3 |
References
- https://www.youtube.com/watch?v=JE1Kcq3iJpcExploit, Third Party Advisory
- https://www.youtube.com/watch?v=JE1Kcq3iJpcExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-45851?
How severe is CVE-2021-45851?
How do I fix CVE-2021-45851?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-45843glFusion CMS v1.7.9 is affected by a reflected Cross Site Sc…6.1
- CVE-2021-45844Improper sanitization in the invocation of ODA File Converte…7.8
- CVE-2021-45845The Path Sanity Check script of FreeCAD 0.19 is vulnerable t…7.8
- CVE-2021-45846A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an…5.5
- CVE-2021-45847Several missing input validations in the 3MF parser componen…5.5
- CVE-2021-45848Denial of service (DoS) vulnerability in Nicotine+ 3.0.3 and…7.5
- CVE-2021-45852An issue was discovered in Projectworlds Hospital Management…5.3
- CVE-2021-45856Accu-Time Systems MAXIMUS 1.0 telnet service suffers from a …7.5
- CVE-2021-45860An integer overflow in DTSStreamReader::findFrame() of tsMux…5.5
- CVE-2021-45861There is an Assertion `num <= INT_BIT' failed at BitStreamRe…5.5
- CVE-2021-45863tsMuxer git-2678966 was discovered to contain a heap-based b…5.5
- CVE-2021-45864tsMuxer git-c6a0277 was discovered to contain a segmentation…5.5
Are you affected by CVE-2021-45851?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST