← Back

Sharetribe

sharetribe

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Sharetribe
sharetribe
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-41280
1Sharetribe
1Sharetribe
Nov 21, 2024
Nov 19, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Sharetribe Go is a source available marketplace software. In affected versions operating system command injection is possible on installations of Sharetribe Go, that do not have a secret AWS Simple Notification Service (...Show more
Sharetribe Go is a source available marketplace software. In affected versions operating system command injection is possible on installations of Sharetribe Go, that do not have a secret AWS Simple Notification Service (SNS) notification token configured via the `sns_notification_token` configuration parameter. This configuration parameter is unset by default. The vulnerability has been patched in version 10.2.1. Users who are unable to upgrade should set the`sns_notification_token` configuration parameter to a secret value.Show less