CVE-2021-38455CWE-20

AUVESY Versiondog

High · published October 22, 2021

CVSS v3.1
7.3
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

The affected product’s OS Service does not verify any given parameter. A user can supply any type of parameter that will be passed to inner calls without checking the type of the parameter or the value.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00772 · 55.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-10-22T11:23Z
EPSS history
Timeline
  • 22 OCT 11:23Z
    AUVESY Versiondog
    cvelistv5