CVE-2021-32096

The ConsoleAction component of U.S

published May 7, 2021

CVSS
—
EPSS
1%
Percentile
47.6
In the wild
Unconfirmed
What it is

The ConsoleAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows a CSRF attack that results in injecting arbitrary Ruby code (for an eval call) via the CONSOLE_COMMAND_STRING parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00592 · 47.6th percentile
Published
2021-05-07T03:51Z
EPSS history
Timeline
  • 07 MAY 03:51Z
    The ConsoleAction component of U.S
    cvelistv5