What is CVE-2021-36123?

CVE-2021-36123 is a medium-severity vulnerability in Echobh Sharecare. CVSS score: 6.5/10. Published 2021-07-13.

How severe is CVE-2021-36123?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Echobh Sharecare

CVE-2021-36123

An issue was discovered in Echo ShareCare 8.15.5. The TextReader feature in General/TextReader/TextReader.cfm is susceptible to a local file inclusion vulnerability when processing remote input in the textFile parameter from an authenticated user, leading to the ability to read arbitrary files on the server filesystems as well any files accessible via Universal Naming Convention (UNC) paths.

EPSS: 0.008 (51.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Echobh Sharecare — versions 8.15.5
N/a — versions n/a

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-36123?: CVE-2021-36123 is a medium-severity vulnerability in Echobh Sharecare. CVSS score: 6.5/10. Published 2021-07-13.
How severe is CVE-2021-36123?: Medium severity. CVSS v3 base score is 6.5 out of 10.