CVE-2021-46686
- State
- Published
- Severity
- 9.8 Critical
- Published
- Feb 17, 2025
- Updated
- Feb 18, 2025
- Reserved
- Feb 12, 2025
Description
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in acmailer CGI ver.4.0.3 and earlier and acmailer DB ver.1.1.5 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 9.8 Critical | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | jpcert |
Weaknesses
- CWE-78 Improper neutralization of special elements used in an OS command ('OS Command Injection')
Affected Products
| Product | Versions |
|---|---|
acmailer CGIExtra Innovation Inc. |
|
acmailer DBExtra Innovation Inc. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.