Vulnerabilities > CVE-2021-23497 - Unspecified vulnerability in SET Project SET 1.0.0/1.0.1

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
set-project
critical
NVD
Published: 2022-02-04
Updated: 2024-11-21

Summary

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. **Note:** This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821

Vulnerable Configurations

Part Description Count
Application
Set_Project
3

References