CVE-2021-23447
First published: Thu Oct 07 2021(Updated: )
Credit: report@snyk.io
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Teddy Project Teddy | <0.5.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-23447?
The severity of CVE-2021-23447 is medium (6.1).
How does CVE-2021-23447 affect the Teddy package?
CVE-2021-23447 affects the Teddy package before version 0.5.9.
What is the vulnerability type of CVE-2021-23447?
CVE-2021-23447 is a type confusion vulnerability.
How can the type confusion vulnerability in CVE-2021-23447 be exploited?
The type confusion vulnerability can be exploited by bypassing input sanitization when the model content is an array instead of a string.
Is there a fix for CVE-2021-23447?
Yes, CVE-2021-23447 can be fixed by updating the Teddy package to version 0.5.9 or newer.
- collector/nvd-index
- vendor/teddy project
- product/teddy
- canonical/teddy project teddy