CVE-2021-26558
Deserialization of Untrusted Data
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 2.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
11 Nov 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI versions prior to 5.0.0.
Affected products
Apache Software Foundation · Apache ShardingSphere-UIWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →