CVE-2021-45851

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2021-45851

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-45851.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2021-45851

Aliases

GHSA-9vp3-7qwq-83r9

Published

2022-03-16T10:15:08.060Z

Modified

2026-07-09T05:14:45.296432Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the server's internal environment and services, often potentially leading to the attacker executing commands on the server.

References

https://www.youtube.com/watch?v=JE1Kcq3iJpc

Affected packages

Git / github.com/frangoteam/fuxa

Affected ranges

Type

GIT

Repo

https://github.com/frangoteam/fuxa

Events

Introduced

13d108722b23601fa8d28f8dcbd7c960f360dc01

Last affected

13d108722b23601fa8d28f8dcbd7c960f360dc01

Database specific

{
    "cpe": "cpe:2.3:a:frangoteam:fuxa:1.1.3:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.1.3"
        },
        {
            "last_affected": "1.1.3"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

1.*

1.1.3

v1.*

v1.1.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-45851.json"