2021-09-10

2021-09-11

2021-09-12

All (2) Critical (2)

CVE-2021-40146 CRITICAL PATCH Act Now

A Remote Code Execution (RCE) vulnerability was discovered in the Any23 YAMLExtractor.java file and is known to affect Any23 versions < 2.5. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Java Any23

NVD

CVSS 3.1

9.8

EPSS

5.7%

CVE-2021-38555 CRITICAL PATCH Act Now

An XML external entity (XXE) injection vulnerability was discovered in the Any23 StreamUtils.java file and is known to affect Any23 versions < 2.5. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XXE Java Any23

NVD

CVSS 3.1

9.1

EPSS

2.8%