CVE-2021-28355

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Apr 13, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-283568.8Remote Procedure Call Runtime Remote Code Execution VulnerabilityCVE-2021-283578.8Remote Procedure Call Runtime Remote Code Execution VulnerabilityCVE-2021-283588.8Remote Procedure Call Runtime Remote Code Execution VulnerabilityCVE-2021-283596.1The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versCVE-2021-283617.5An issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with a zero lengCVE-2021-283627.5An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incomCVE-2021-283636.5The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The iniCVE-2021-283728.3ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniqueCVE-2021-283737.5The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code without a valid passwCVE-2021-283747.5The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak CVE-2021-283757.8An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applicatCVE-2021-283762.7ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files.
CVE-2021-28355: High severity, CVSS 8.8 | Vulnix