PT-2021-15485

CVE-2021-23391

Published

2021-06-07

Updated

2022-07-12

CVSS 3.1

7.3

High

MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions calipso (affected versions not specified)

Description The issue allows a malicious module to overwrite files on an arbitrary file system through the module install functionality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-JXCC-G75X-QGW9

SNYK-JS-CALIPSO-1300555

Found an issue in the description? Have something to add? Feel free to write us 👾