CVE-2021-32835

Published: Sep 9, 2021Modified: Jun 17, 2026

9.9

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.1 / Impact: 6.0

Source: NVD

Description

Eclipse Keti is a service that was designed to protect RESTfuls API using Attribute Based Access Control (ABAC). In Keti a sandbox escape vulnerability may lead to post-authentication Remote Code execution. This vulnerability is known to exist in the latest commit at the time of writing this CVE (commit a1c8dbe). For more details see the referenced GHSL-2021-063.

Affected (1)

Products: Eclipse: Keti

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Eclipse Keti	All versions

Related CWEs

Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

References (2)

https://securitylab.github.com/advisories/GHSL-2021-063-eclipse-keti/

Source: security-advisories@github.com

ExploitThird Party Advisory

https://securitylab.github.com/advisories/GHSL-2021-063-eclipse-keti/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.