CVE-2021-32634
- Source
- https://cve.org/CVERecord?id=CVE-2021-32634
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-32634.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2021-32634
- Aliases
-
- GHSA-m5qf-gfmp-7638
- Published
- 2021-05-21T18:15:08Z
- Modified
- 2026-05-16T04:03:04Z
- Severity
-
- 7.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Emissary is a distributed, peer-to-peer, data-driven workflow framework. Emissary 6.4.0 is vulnerable to Unsafe Deserialization of post-authenticated requests to the
WorkSpaceClientEnqueue.actionREST endpoint. This issue may lead to post-auth Remote Code Execution. This issue has been patched in version 6.5.0. As a workaround, one can disable network access to Emissary from untrusted sources. - References