Description
The ConsoleAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows a CSRF attack that results in injecting arbitrary Ruby code (for an eval call) via the CONSOLE_COMMAND_STRING parameter.
Unscored
CVE-2021-32096
EUVD-2021-18955GHSA-8pp7-v75p-mx4p
The ConsoleAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows a CSRF attack that results in injecting arbitrary …
Published May 7, 2021 · Updated Aug 3, 2024 · Assigned by mitre