Vulnerability · Published Dec 25, 2022 · Assigned by VulDB

CVE-2021-4277fredsmith utils Filename screenshot_sync predictable state

Low 2.6

In plain English

A low-severity security flaw in utils from fredsmith. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).

Severity (CVSS 3.1)2.6Low

Exploit odds (30 days)0.5%top 57.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability, which was classified as problematic, has been found in fredsmith utils. This issue affects some unknown processing of the file screenshot_sync of the component Filename Handler. The manipulation leads to predictable from observable state. The name of the patch is dbab1b66955eeb3d76b34612b358307f5c4e3944. It is recommended to apply a patch to fix this issue. The identifier VDB-216749 was assigned to this vulnerability.

Affected products (as reported)

Vendor	Product	Versions
fredsmith	utils	n/a

Weakness: CWE-341 · Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

References

https://vuldb.com/?id.216749 technical-description, vdb-entry
https://github.com/fredsmith/utils/commit/dbab1b66955eeb3d76b34612b358307f5c4e3944 mitigation, patch