Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2021-3584 — HIGH severity vulnerability | Release Alert

CVE-2021-3584

7.2

HIGHCVSS v3

Published

December 23, 2021

CVSS v2

9 HIGH

Affected

8 projects

Assigned by

Red Hat

Severity scale

010

Description

A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could use Sendmail configuration options to overwrite the defaults and perform command injection. The highest threat from this vulnerability is to confidentiality, integrity and availability of system. Fixed releases are 2.4.1, 2.5.1, 3.0.0.

NPMNode Implementation of Foreman

< 2.4.1, >= 2.5.0, < 2.5.1, = 3.0.0NVD

theforeman/foreman

GitHuban application that automates the lifecycle of servers

< 2.4.1, >= 2.5.0, < 2.5.1, = 3.0.0NVD

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Python library to manipulate The Foreman through the API

< 2.4.1, >= 2.5.0, < 2.5.1, = 3.0.0NVD

Crates.ioToolchain manager for simple binary tools

< 2.4.1, >= 2.5.0, < 2.5.1, = 3.0.0NVD

NuGet GalleryForeman

< 2.4.1, >= 2.5.0, < 2.5.1, = 3.0.0NVD

RubyGemsProcess manager for applications with multiple components

< 2.4.1, >= 2.5.0, < 2.5.1, = 3.0.0NVD

GitHubToolchain manager for Roblox projects

< 2.4.1, >= 2.5.0, < 2.5.1, = 3.0.0NVD

ddollar/foreman

GitHubManage Procfile-based applications

< 2.4.1, >= 2.5.0, < 2.5.1, = 3.0.0NVD