CVE-2021-4430

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2021-4430
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-4430.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-4430
Published
2023-11-06T08:15:21Z
Modified
2024-05-23T01:23:17.702138Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

A vulnerability classified as problematic has been found in Ortus Solutions ColdBox Elixir 3.1.6. This affects an unknown part of the file src/defaultConfig.js of the component ENV Variable Handler. The manipulation leads to information disclosure. Upgrading to version 3.1.7 is able to address this issue. The identifier of the patch is a3aa62daea2e44c76d08d1eac63768cd928cd69e. It is recommended to upgrade the affected component. The identifier VDB-244485 was assigned to this vulnerability.

References

Affected packages

Git / github.com/ortus-solutions/coldbox-elixir

Affected ranges

Type
GIT
Repo
https://github.com/ortus-solutions/coldbox-elixir
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

v3.*

v3.0.0
v3.0.0-alpha.17
v3.0.0-alpha.18
v3.0.0-alpha.19
v3.0.0-alpha.26
v3.0.0-alpha.27
v3.0.0-alpha.28
v3.0.0-alpha.29
v3.0.0-beta.1
v3.0.0-beta.11
v3.0.0-beta.12
v3.0.0-beta.13
v3.0.0-beta.14
v3.0.0-beta.15
v3.0.0-beta.16
v3.0.0-beta.17
v3.0.0-beta.18
v3.0.0-beta.19
v3.0.0-beta.2
v3.0.0-beta.20
v3.0.0-beta.3
v3.0.0-beta.7
v3.0.0-beta.8
v3.0.0-beta.9
v3.1.0
v3.1.1
v3.1.4
v3.1.5
v3.1.6