Deserialization of Untrusted Data in zmister2016/mrdoc
CVE-2021-32568

7.5HIGH

Key Information:

Vendor

Zmister2016

Status
Zmister2016/mrdoc
Vendor
CVE Published:
6 September 2021

What is CVE-2021-32568?

mrdoc is vulnerable to Deserialization of Untrusted Data

Affected Version(s)

zmister2016/mrdoc < 0.7.1

References

https://huntr.dev/bounties/04fc04b3-2dc1-4cad-a090-e403cd...
x_refsource_CONFIRM
https://github.com/zmister2016/mrdoc/commit/bb49e1287700b...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

CVSS V3.0

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.