2021-09-11

2021-09-12

2021-09-13

CVE-2021-23440 Sep 12, 13:15 CRITICAL POC PATCH Act Now

This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Memory Corruption Oracle Communications Cloud Native Core Policy Set Value

NVD GitHub

CVSS 3.1

9.8

EPSS

2.5%

CVE-2021-23435 Sep 12, 20:15 MEDIUM PATCH This Month

This affects the package clearance before 2.5.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Open Redirect vulnerability could allow attackers to redirect users to malicious websites via URL manipulation.

Open Redirect Clearance Thoughtbot

NVD GitHub

CVSS 3.1

6.1

EPSS

0.7%