CVEvulnerability

CVE-2021-42952

9.9 CRITICAL Published 2022-02-25 Modified 2026-07-09 Official page ↗
Status
Modified
Published
2022-02-25
Last modified
2026-07-09
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.9 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P

Description

Zepl Notebooks before 2021-10-25 are affected by a sandbox escape vulnerability. Upon launching Remote Code Execution from the Notebook, users can then use that to subsequently escape the running context sandbox and proceed to access internal Zepl assets including cloud metadata services.

Affected configurations

• zepl zepl (< 2021-10-25)

References