← All advisories

High severity7.8NVD Advisory· Published Jul 12, 2022· Updated Jul 9, 2026

CVE-2021-36668

CVE-2021-36668

Description

URL injection in Driva inSync 6.9.0 for MacOS, allows attackers to force a visit to an arbitrary url via the port parameter to the Electron App.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Driva/inSyncdescription
Druva/inSyncllm-fuzzy
Range: <=6.9.0
Druva/Insync Client3 versions
cpe:2.3:a:druva:insync_client:*:*:*:*:*:linux:*:*+ 2 more
- cpe:2.3:a:druva:insync_client:*:*:*:*:*:linux:*:*range: <5.9.3
- cpe:2.3:a:druva:insync_client:*:*:*:*:*:macos:*:*range: <7.0.1
- cpe:2.3:a:druva:insync_client:*:*:*:*:*:windows:*:*range: <7.0.1

Patches

Vulnerability mechanics

References

2

imhotepisinvisible.com/druva-lpe/nvdExploitPatchTechnical DescriptionThird Party Advisory
docs.druva.com/Knowledge_Base/Security_Update/Security_Advisory_for_inSync_Client_7.0.1_and_beforenvdVendor Advisory

News mentions

0

No linked articles in our index yet.