CVE-2021-43360: Sunnet eHRD - Insecure Deserialization
Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authenticated remote attacker with database access privilege, to execute arbitrary code and control the system or interrupt services.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2021-43360?
CVE-2021-43360 is considered a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2021-43360?
To fix CVE-2021-43360, ensure that input validation is properly implemented for the serialization function in the affected software versions.
Who is affected by CVE-2021-43360?
CVE-2021-43360 affects users of Sunnet eHRD versions 8 and 9 that have database access privileges.
What type of attacks can be performed using CVE-2021-43360?
With CVE-2021-43360, an attacker can execute arbitrary code and potentially control the system or disrupt services.
Is CVE-2021-43360 a local or remote vulnerability?
CVE-2021-43360 is a remote vulnerability that requires the attacker to be post-authenticated with database access privileges.