CVE-2021-40146
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-40146
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-40146.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-40146
- Aliases
- Published
- 2021-09-11T11:15:14Z
- Modified
- 2025-01-14T09:46:52.851285Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A Remote Code Execution (RCE) vulnerability was discovered in the Any23 YAMLExtractor.java file and is known to affect Any23 versions < 2.5. RCE vulnerabilities allow a malicious actor to execute any code of their choice on a remote machine over LAN, WAN, or internet. RCE belongs to the broader class of arbitrary code execution (ACE) vulnerabilities.
- References