Remote Code Execution Vulnerability in OpenGrok by Oracle

CVE-2021-2322

What is CVE-2021-2322?

This security issue in OpenGrok allows a low-privileged attacker with network access via HTTPS to execute unauthorized commands, potentially leading to a complete takeover of the system. Users running versions 1.6.7 and prior are at risk of exploitation. By leveraging this vulnerability, attackers may achieve significant impacts on confidentiality, integrity, and availability of the affected systems. It is crucial for organizations using OpenGrok to apply necessary updates and mitigate possible threats.

References