CVE-2021-27020

Name of the Vulnerable Software and Affected Versions Puppet Enterprise (affected versions not specified)

Description The issue is related to the lack of sanitization of user input when performing a CSV export, which presents a security risk. This allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.