CVE-2021-32639

Published: 2021-07-02T16:15Z

Last Modified: 2024-11-21T06:07Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Emissary is a P2P-based, data-driven workflow engine. Emissary version 6.4.0 is vulnerable to Server-Side Request Forgery (SSRF). In particular, the `RegisterPeerAction` endpoint and the `AddChildDirectoryAction` endpoint are vulnerable to SSRF. This vulnerability may lead to credential leaks. Emissary version 7.0 contains a patch. As a workaround, disable network access to Emissary from untrusted sources. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt