CVE-2021-21307
high · 8.6A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
Lucee Server is a dynamic, Java based (JSR-223), tag and scripting language used for rapid web application development. In Lucee Admin before versions 5.3.7.47, 5.3.6.68 or 5.3.5.96 there is an unauthenticated remote code exploit. This is fixed in versions 5.3.7.47, 5.3.6.68 or 5.3.5.96. As a workaround, one can block access to the Lucee Administrator.
8.6
CVSS
89.2%
EPSS (exploit prob.)
100th
EPSS percentile
2021-02-11
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Weaknesses
CWE-862
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| lucee | lucee_server | >= 5.3.5.00, < 5.3.5.96 |
| lucee | lucee_server | >= 5.3.6.00, < 5.3.6.68 |
| lucee | lucee_server | >= 5.3.7.00, < 5.3.7.47 |
Check a specific version with /api/v1/cve/match.
References
- http://ciacfug.org/blog/updating-lucee-as-part-of-a-vulnerability-alert-response
- http://packetstormsecurity.com/files/163864/Lucee-Administrator-imgProcess.cfm-Arbitrary-File-Write.html
- https://dev.lucee.org/t/lucee-vulnerability-alert-november-2020/7643
- https://github.com/httpvoid/writeups/blob/main/Apple-RCE.md
- https://github.com/lucee/Lucee/commit/6208ab7c44c61d26c79e0b0af10382899f57e1ca
- https://github.com/lucee/Lucee/security/advisories/GHSA-2xvv-723c-8p7r
- https://portswigger.net/daily-swig/security-researchers-earn-50k-after-exposing-critical-flaw-in-apple-travel-portal
- http://ciacfug.org/blog/updating-lucee-as-part-of-a-vulnerability-alert-response
- http://packetstormsecurity.com/files/163864/Lucee-Administrator-imgProcess.cfm-Arbitrary-File-Write.html
- https://dev.lucee.org/t/lucee-vulnerability-alert-november-2020/7643
- https://github.com/httpvoid/writeups/blob/main/Apple-RCE.md
- https://github.com/lucee/Lucee/commit/6208ab7c44c61d26c79e0b0af10382899f57e1ca
- https://github.com/lucee/Lucee/security/advisories/GHSA-2xvv-723c-8p7r
- https://portswigger.net/daily-swig/security-researchers-earn-50k-after-exposing-critical-flaw-in-apple-travel-portal
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2021-21307