CVE-2021-33575

Description

The Pixar ruby-jss gem before 1.6.0 allows remote attackers to execute arbitrary code because of the Plist gems documented behavior of using Marshal.load during XML document processing.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

2.74

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2021-33575 are fixed in Ruby-ruby-jss 1.6.0	Windows
Vulnerabilities CVE-2021-33575 are fixed in Ruby-ruby-jss for Linux 1.6.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234