CVE-2021-46686

critical · 9.8

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in acmailer CGI ver.4.0.3 and earlier and acmailer DB ver.1.1.5 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker.

9.8

CVSS

1.4%

EPSS (exploit prob.)

72nd

EPSS percentile

2025-02-18

Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-78

References

https://acmailer.jp/info/de.cgi?id=103
https://jvn.jp/en/jp/JVN96957439/
https://www.acmailer.jp/info/de.cgi?id=102

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-46686