CVE-2021-27020 Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export

Description

Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Puppet Enterprise	Versions non publiées

Autres CVE de Puppet Enterprise

Les 4 CVE de Puppet Enterprise →

CVE-2021-27022 A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive… Non notée CVE-2020-7943 Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints Non notée CVE-2019-10694 The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the… Non notée