CVE-2020-21514
8.8 highEPSS 0.8%
High (8.8) in fluentd. EPSS 0.8% chance of exploitation in the next 30 days.
An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password.
Severity
CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
- CWE
- CWE-276
- Published
- Modified
- Record from
- the NVD, synced
Affected
- fluentd:fluentd
- fluentd:fluentd-ui
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|
| GHSA-wrxf-x8rm-6ggg | RubyGems | fluentd-ui | <=1.2.2 | no fix published |
References
Check your stackJSON