cbcvebase.

Sas Intrnet vulnerabilities

1 known vulnerability affecting sas/sas_intrnet.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2021-41569P2HIGHCVSS 7.5ExploitedPoCfixed in 9.4v9.42021-11-19
CVE-2021-41569 [HIGH] CWE-829 CVE-2021-41569: SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library (included by SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library (included by default) in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro. Users can escape the context of the configured user-con
nvd
Sas Intrnet vulnerabilities | cvebase