Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 09/09/2021 Updated: 25/04/2022

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 9.9 | Impact Score: 6 | Exploitability Score: 3.1

VMScore: 578

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Eclipse Keti is a service that was designed to protect RESTfuls API using Attribute Based Access Control (ABAC). In Keti a user able to create Policy Sets can run arbitrary code by sending malicious Groovy scripts which will escape the configured Groovy sandbox. This vulnerability is known to exist in the latest commit at the time of writing this CVE (commit a1c8dbe). For more details see the referenced GHSL-2021-063.

Vulnerable Product	Search on Vulmon	Subscribe to Product
eclipse keti -

CWE-917 https://securitylab.github.com/advisories/GHSL-2021-063-eclipse-keti/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-32834

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect