[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2021-25283":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":33,"references":38,"score":60,"epss_score":61,"epss_percentile":62,"is_kev":63,"cisa_kev_date_added":64,"cisa_kev_due_date":64,"cisa_ssvc":65,"attack_mappings":71,"exploits":99},290621,"CVE-2021-25283","EUVD-2021-0229","SaltStack Salt Server Side Template Injection\n\nAn issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect against server side template injection attacks.","2022-05-24T17:43:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":19,"availabilityImpact":17,"privilegesRequired":18,"confidentialityImpact":17},"UNCHANGED","3.1",9.8,"NETWORK","CRITICAL","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","HIGH","NONE","LOW",true,[22],"CWE-94",[24,25,26,27,28,29,30,31,32],"cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","cpe:2.3:a:salt:salt:2018.3.5:*:*:*:*:*:*:*","cpe:2.3:a:salt:salt:*:*:*:*:*:*:*:*",[34,35,36,37],"Saltstack Salt","Fedoraproject Fedora","Debian Debian Linux","Salt Salt",[39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59],"https:\u002F\u002Fgithub.com\u002Fsaltstack\u002Fsalt\u002Freleases","https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2021\u002F11\u002Fmsg00009.html","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB\u002F","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FFUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH\u002F","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FYOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5\u002F","https:\u002F\u002Fsaltproject.io\u002Fsecurity_announcements\u002Factive-saltstack-cve-release-2021-feb-25\u002F","https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202103-01","https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202310-22","https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2021\u002Fdsa-5011","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2021-25283","https:\u002F\u002Fsaltproject.io\u002Fsecurity_announcements\u002Factive-saltstack-cve-release-2021-feb-25","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FYOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FFUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FYOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FFUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB","https:\u002F\u002Fgithub.com\u002Fsaltstack\u002Fsalt\u002Fblob\u002F8f9405cf8e6f7d7776d5000841c886dec6d96250\u002Fdoc\u002Ftopics\u002Freleases\u002F3002.5.rst#L12","https:\u002F\u002Fgithub.com\u002Fsaltstack\u002Fsalt\u002Fblob\u002F8f9405cf8e6f7d7776d5000841c886dec6d96250\u002Fdoc\u002Ftopics\u002Freleases\u002F3001.5.rst#L34","https:\u002F\u002Fgithub.com\u002Fsaltstack\u002Fsalt","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsalt\u002FPYSEC-2021-52.yaml",0.69,0.10233,0.95645,false,null,{"timestamp":64,"automatable":66,"tech_impact":67,"exploitation":68,"cisa_decision":69,"cisa_remediation_timeline":70},"no","partial","none",{},"FSU",[72,78,87,93],{"name":73,"source":74,"tactics":75,"technique_id":77},"Exploit Public-Facing Application","attack_vector",[76],"initial-access","T1190",{"name":79,"source":80,"cwe_ids":81,"tactics":82,"capec_ids":84,"technique_id":86},"HTML Smuggling","capec",[22],[83],"stealth",[85],"CAPEC-35","T1027.006",{"name":88,"source":80,"cwe_ids":89,"tactics":90,"capec_ids":91,"technique_id":92},"Embedded Payloads",[22],[83],[85],"T1027.009",{"name":94,"source":80,"cwe_ids":95,"tactics":96,"capec_ids":97,"technique_id":98},"Resource Forking",[22],[83],[85],"T1564.009",[]]