CVE-2021-33318

An Input Validation Vulnerability exists in Joel Christner .NET C# packages WatsonWebserver, IpMatcher 1.0.4.1 and below (IpMatcher) and 4.1.3 and below (WatsonWebserver) due to insufficient validation of input IP addresses and netmasks against the internal Matcher list of IP addresses and subnets.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.05% chance of exploitation in the next 30 days, 81st percentile

Published

2022-05-16

Updated

2024-08-03

Proof-of-concept exploits (1)

• kaoudis/advisories/blob/main/0-2021.md0★ · 2022-05-19

Security advisories

• jchristn/IpMatcher
• jchristn/WatsonWebserver
• advisories/GHSA-qj93-37f5-mr29

References

• CVE Record
• NVD entry