CVE-2021-42951
High
Description
A Remote Code Execution (RCE) vulnerability exists in Algorithmia MSOL all versions before October 10 2021 of SaaS. Users can register for an account and are allocated a set number of credits to try the product. Once users authenticate, they can proceed to create a new, specially crafted Algorithm and subsequently launch remote code execution with their desired result.
SeverityHigh
CVSS8.8
Exploit probability—
ProductAlgorithmia Msol
PublishedMar 1, 2022
First seenMar 1, 2022
How to fix
Update
- algorithmia msol2021-10-10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| algorithmia msol | v < 2021-10-10 | 2021-10-10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.