← Back

CVE-2021-41078

nvd nist
Published: Oct 26, 2021Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Nameko through 2.13.0 can be tricked into performing arbitrary code execution when deserializing the config file.

Affected (10)

Products: Nameko: Nameko
Nameko
1 product
Nameko
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Nameko
Nameko
Up to 2.13.0
Nameko
Version 3.0.0 rc1
Nameko
Version 3.0.0 rc2
Nameko
Version 3.0.0 rc3
Nameko
Version 3.0.0 rc4
Nameko
Version 3.0.0 rc5
Nameko
Version 3.0.0 rc6
Nameko
Version 3.0.0 rc7
Nameko
Version 3.0.0 rc8
Nameko
Version 3.0.0 rc9

Related CWEs

CWE-502
Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (4)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.