Approved changes feed: RSS · Atom
cpe:2.3:a:camunda:modeler:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Camunda (96343b41-5a3b-5f3c-9c6f-046200946183) |
|---|---|
| Product | Modeler (b84dee2c-57dc-5ee6-955d-b6961430fe7d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/camunda/camunda-modeler |
purl2cpe | 2026-06-01 10:12:46.193488 |
pkg:npm/camunda-modeler |
purl2cpe | 2026-06-01 10:12:46.193492 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-28154 |
vulnerable | 2026-06-08 05:31:23.023672 |
Details available
Camunda Modeler (aka camunda-modeler) through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it does not allow any remote scripts to be opened, no unsafe scripts to be evaluated, no remote sites to be browsed.
Published: 2021-03-11T21:14:43.000Z
Updated: 2024-08-03T21:40:12.134Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.