← All advisories

High severity8.8NVD Advisory· Published Aug 30, 2021· Updated Jun 17, 2026

CVE-2021-27020

CVE-2021-27020

Description

Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export.

Affected products

3

Puppet (software)/Puppet Enterprise2 versions
cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*range: <2019.8.6
- (no CPE)
Puppet/Puppet Enterprisedescription

Patches

Vulnerability mechanics

References

1

puppet.com/security/cve/CVE-2021-27020nvdVendor Advisory

News mentions

0

No linked articles in our index yet.