← All advisories

Critical severity9.8NVD Advisory· Published Jul 16, 2022· Updated Jun 17, 2026

CVE-2021-36711

CVE-2021-36711

Description

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
OctoBotPyPI	< 0.4.4	0.4.4

Affected products

3

Octobot/Octobot
cpe:2.3:a:octobot:octobot:*:*:*:*:*:*:*:*
Range: <0.4.4
OctoBot/WebInterfacedescription
ghsa-coords
pkg:pypi/octobot
Range: < 0.4.4

Patches

Vulnerability mechanics

References

10

packetstormsecurity.com/files/167780/OctoBot-WebInterface-0.4.3-Remote-Code-Execution.htmlnvdExploitThird Party AdvisoryWEB
github.com/Drakkar-Software/OctoBot/issues/1966nvdExploitThird Party AdvisoryWEB
github.com/Drakkar-Software/OctoBot/blob/master/CHANGELOG.mdnvdThird Party AdvisoryWEB
github.com/advisories/GHSA-fr75-x856-q6j8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-36711ghsaADVISORY
packetstormsecurity.com/files/167721/Sashimi-Evil-OctoBot-Tentacle.htmlnvdThird Party AdvisoryVDB EntryWEB
www.octobot.onlinenvdVendor Advisory
github.com/Drakkar-Software/OctoBot/blob/master/CHANGELOG.mdghsaWEB
github.com/pypa/advisory-database/tree/main/vulns/octobot/PYSEC-2022-235.yamlghsaWEB
www.octobot.onlineghsaWEB

News mentions

0

No linked articles in our index yet.