漏洞描述
Lucee Admin before versions 5.3.7.47, 5.3.6.68 or 5.3.5.96 contains an unauthenticated remote code execution vulnerability.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
github.comhttps://github.com/lucee/Lucee/security/advisories/GHSA-2xvv-723c-8p7r↗github.comhttps://github.com/httpvoid/writeups/blob/main/Apple-RCE.md↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2021-21307↗ciacfug.orghttp://ciacfug.org/blog/updating-lucee-as-part-of-a-vulnerability-alert-response↗dev.lucee.orghttps://dev.lucee.org/t/lucee-vulnerability-alert-november-2020/7643↗