CVE:CVE-2021-32558
CNNVD:CNNVD-202107-1766
Atlassian Asterisk是美国Atlassian公司的一个应用软件。提供了一个开发程序错误跟踪功能。
Atlassian Asterisk存在注入漏洞，该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
solution:Upgrade digium asterisk to a higher version than 13.38.3,16.19.1,17.9.4,18.15.1,and avoid the version [13.0.0,13.38.3),[16.0.0,16.19.1),[17.0.0,17.9.4),[18.0.0,18.15.1); Upgrade digium certified_asterisk to a higher version than 16.8,16.8:cert1-rc1,16.8:cert1-rc2,16.8:cert1-rc3,16.8:cert1-rc4,16.8:cert2,16.8:cert3,16.8:cert4,16.8:cert4-rc1,16.8:cert4-rc2,16.8:cert4-rc3,16.8:cert4-rc4,16.8:cert5,16.8:cert6,16.8:cert7,16.8:cert8,16.8:cert9,and avoid the version 16.8,16.8:cert1-rc1,16.8:cert1-rc2,16.8:cert1-rc3,16.8:cert1-rc4,16.8:cert2,16.8:cert3,16.8:cert4,16.8:cert4-rc1,16.8:cert4-rc2,16.8:cert4-rc3,16.8:cert4-rc4,16.8:cert5,16.8:cert6,16.8:cert7,16.8:cert8,16.8:cert9; Upgrade debian debian_linux to a higher version than 9.0,11.0,and avoid the version 9.0,11.0