CVE-2021-4430

    Dashboard / Vulnerabilities / CVE-2021-4430

    CVE-2021-4430

    Published: 6 Nov 2023Last Modified: 20 Oct 2026

    Summary:

    Details: A vulnerability classified as problematic has been found in Ortus Solutions ColdBox Elixir 3.1.6. This affects an unknown part of the file src/defaultConfig.js of the component ENV Variable Handler. The manipulation leads to information disclosure. Upgrading to version 3.1.7 is able to address this issue. The identifier of the patch is a3aa62daea2e44c76d08d1eac63768cd928cd69e. It is recommended to upgrade the affected component. The identifier VDB-244485 was assigned to this vulnerability.

    References: https://github.com/Ortus-Solutions/coldbox-elixir/releases/tag/v3.1.7, https://vuldb.com/?ctiid.244485, https://vuldb.com/?id.244485, https://github.com/Ortus-Solutions/coldbox-elixir/commit/a3aa62daea2e44c76d08d1eac63768cd928cd69e

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 202a66f3ff602caac57e11582a44383eee6773a9
    Fixed -None

    Affected versions

    3.1.6

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-4430 | CVE-DB