[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLpJm0d7WHK7DbDYfprpJNxfNUr45JAsu1CI4pXdmZj0":3,"g5a-risk:CVE-2021-21363":125},{"success":4,"data":5,"meta":123},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":49,"epssPercentile":26,"epssTimeSeries":50,"severity":51,"affectedProducts":52,"affectedProductsCount":27,"references":58,"referencesCount":69,"weaknesses":70,"weaknessesCount":69,"isActivelyExploited":85,"cisaInfo":26,"otxData":26,"relatedBlogPosts":86,"seoMetadata":87,"configurations":112,"relatedVendorCves":121,"notableEvents":122},"CVE-2021-21363","What is CVE-2021-21363?","swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI \u002F Swagger definition. In swagger-codegen before version 2.4.19, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. This vulnerability is local privilege escalation because the contents of the `outputFolder` can be appended to by an attacker. As such, code written to this directory, when executed can be attacker controlled. For more details refer to the referenced GitHub Security Advisory. This vulnerability is fixed in version 2.4.19. Note this is a distinct vulnerability from CVE-2021-21364.","swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different langua...","2021-03-11T03:15:11.977","2021-03-18T16:11:27.43",7,"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":40,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","HIGH","LOW","NONE","UNCHANGED",null,1,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":38,"ImpactScore":39},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":34,"Scope":35,"ConfidentialityImpact":24,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":36,"BaseSeverity":37,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":24,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:N","REQUIRED","CHANGED",5.3,"MEDIUM",0.8,4,[41],{"Source":17,"Type":18,"CVSSData":42,"BaseSeverity":37,"ExploitabilityScore":47,"ImpactScore":48,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":43,"VectorString":44,"AccessVector":21,"AccessComplexity":37,"Authentication":24,"ConfidentialityImpact":45,"IntegrityImpact":45,"AvailabilityImpact":45,"BaseScore":46,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",4.4,3.4,6.4,0.00414,[49,49,49,49,49,49,49],"High",[53],{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"smartbear","swagger-codegen","*","cpe:2.3:a:smartbear:swagger-codegen:*:*:*:*:*:*:*:*",[59,65],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fgithub.com\u002Fswagger-api\u002Fswagger-codegen\u002Fcommit\u002F987ea7a30b463cc239580d6ad166c707ae942a89","GitHub",[63,64],"Patch","Third Party Advisory",{"url":66,"source":61,"tags":67},"https:\u002F\u002Fgithub.com\u002Fswagger-api\u002Fswagger-codegen\u002Fsecurity\u002Fadvisories\u002FGHSA-pc22-3g76-gm6j",[68,64],"Exploit",2,[71,79],{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":77,"structure":78},"CWE-378","Creation of Temporary File With Insecure Permissions","Opening temporary files without appropriate measures or controls can leave the file, its contents and any function that it impacts vulnerable to attack.","","Draft","Base","Simple",{"id":80,"name":81,"description":82,"extendedDescription":83,"status":84,"abstraction":77,"structure":78},"CWE-379","Creation of Temporary File in Directory with Insecure Permissions","The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.","On some operating systems, the fact that the temporary file exists may be apparent to any user with sufficient privileges to access that directory. Since the file is visible, the application that is using the temporary file could be known. If one has access to list the processes on the system, the attacker has gained information about what the user is doing at that time. By correlating this with the applications the user is running, an attacker could potentially discover what a user's actions are. From this, higher levels of security could be breached.","Incomplete",false,[],{"title":88,"metaDescription":89,"keywords":90,"canonicalUrl":91,"structuredData":92},"What is CVE-2021-21363? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-21363, a high severity cyber security vulnerability from 2021. swagger-codegen is an open-source project which contains a ...","CVE-2021-21363, CVE-2021-21363 vulnerability, CVE-2021-21363 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, smartbear security, swagger-codegen vulnerability","\u002Fwhat-is\u002Fcve-2021-21363",{"@context":93,"@type":94,"headline":88,"description":89,"datePublished":10,"dateModified":11,"author":95,"publisher":99,"about":103,"mainEntityOfPage":107,"articleSection":110,"keywords":111},"https:\u002F\u002Fschema.org","TechArticle",{"@type":96,"name":97,"url":98},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":96,"name":97,"url":98,"logo":100},{"@type":101,"url":102},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":104,"name":6,"description":105,"additionalType":106},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":108,"@id":109},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-21363","Cybersecurity","CVE-2021-21363, CVE-2021-21363 vulnerability, CVE-2021-21363 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[113],{"Operator":26,"Negate":26,"Nodes":114},[115],{"Operator":116,"Negate":26,"CPEMatch":117},"OR",[118],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":119,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":120,"VersionEndIncluding":26},"28D1596B-24DA-4372-B7C9-585ECDBA8C30","2.4.19",[],[],{"lastModified":11,"cacheTime":124,"version":43},1792356220480,{"score":126,"band":127,"action":128,"scoredAt":129},45,"Medium","Plan remediation","2026-10-16T06:50:38.871858+00:00"]