Camunda

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Camunda records in CISA KEV

No Camunda vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Modeler · all components

TI-2021-09385 CVE-2021-28154 · GHSA-ggf5-r98h-6h5g

MEDIUM 42

Camunda Modeler (aka camunda-modeler) through 4.6.0 allows arbitrary file access.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01481 Published 2021-03-11 No fix listed CWE-862