CVE Feed

    Dashboard / CVE / CVE-2021-3703

    CVE-2021-3703

    It was found that the CVE-2021-27918, CVE-2021-31525 and CVE-2021-33196 have been incorrectly mentioned as fixed in RHSA for Serverless 1.16.0 and Serverless client kn 1.16.0. These have been fixed with Serverless 1.17.0.

    Published:Sep 13, 2021
    Last Modified:Nov 21, 2024
    EPS:Aug 26, 2022
    EPSS Score:0.00434
    CVSS Score:7.5

    Affected Products

    Vendor
    Redhat
    Product
    Openshift Serverless
    Vendor
    Redhat
    Product
    Serverless

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-7425 (CVSS 7.8) — A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts interna…
    CVE-2025-6020 (CVSS 7.8) — A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper pr…
    CVE-2025-49796 (CVSS 9.1) — A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger…
    CVE-2025-49794 (CVSS 9.1) — A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certa…
    CVE-2025-5914 (CVSS 7.8) — A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar…
    CVE-2025-22871 (CVSS 9.1) — The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This …
    CVE-2025-22866 (CVSS 4) — Due to the usage of a variable time instruction in the assembly implementation of an internal function, a smal…
    CVE-2024-43800 (CVSS 5) — serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to red…
    CVE-2024-43799 (CVSS 5) — Send is a library for streaming files from the file system as a http response. Send passes untrusted user inpu…
    CVE-2024-43796 (CVSS 5) — Express.js minimalist web framework for node. In express < 4.20.0, passing untrusted user input - even after s…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High