Vulnerability Details CVE-2021-46703
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Exploit prediction scoring system (EPSS) score
EPSS Score 0.014
EPSS Ranking 79.3%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2021-46703
-
cpe:2.3:a:razorengine_project:razorengine:-
-
cpe:2.3:a:razorengine_project:razorengine:3.10.0
-
cpe:2.3:a:razorengine_project:razorengine:4.5.1