Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-4f8h-7hey-vqf4
Vulnerability ID VCID-4f8h-7hey-vqf4
Aliases CVE-2021-21428
GHSA-23x4-m842-fmwf
Summary
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (8)
CWE-269 Improper Privilege Management
CWE-377 Insecure Temporary File
CWE-378 Creation of Temporary File With Insecure Permissions
CWE-379 Creation of Temporary File in Directory with Insecure Permissions
CWE-668 Exposure of Resource to Wrong Sphere
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
System Score Found at
epss 0.0005 https://api.first.org/data/v1/epss?cve=CVE-2021-21428
epss 0.0005 https://api.first.org/data/v1/epss?cve=CVE-2021-21428
epss 0.0005 https://api.first.org/data/v1/epss?cve=CVE-2021-21428
cvssv3.1_qr CRITICAL https://github.com/advisories/GHSA-23x4-m842-fmwf
cvssv3.1 9.3 https://github.com/OpenAPITools/openapi-generator
generic_textual CRITICAL https://github.com/OpenAPITools/openapi-generator
cvssv3.1 9.3 https://github.com/OpenAPITools/openapi-generator/blob/c6530519975341d7784a252132b2f0854f488901/modules/openapi-generator-online/src/main/java/org/openapitools/codegen/online/service/Generator.java#L184-L187
generic_textual CRITICAL https://github.com/OpenAPITools/openapi-generator/blob/c6530519975341d7784a252132b2f0854f488901/modules/openapi-generator-online/src/main/java/org/openapitools/codegen/online/service/Generator.java#L184-L187
cvssv3.1 9.3 https://github.com/OpenAPITools/openapi-generator/pull/8788
generic_textual CRITICAL https://github.com/OpenAPITools/openapi-generator/pull/8788
cvssv3.1 9.3 https://github.com/OpenAPITools/openapi-generator/security/advisories/GHSA-23x4-m842-fmwf
cvssv3.1_qr CRITICAL https://github.com/OpenAPITools/openapi-generator/security/advisories/GHSA-23x4-m842-fmwf
generic_textual CRITICAL https://github.com/OpenAPITools/openapi-generator/security/advisories/GHSA-23x4-m842-fmwf
cvssv3.1 9.3 https://github.com/swagger-api/swagger-codegen/security/advisories/GHSA-pc22-3g76-gm6j
generic_textual CRITICAL https://github.com/swagger-api/swagger-codegen/security/advisories/GHSA-pc22-3g76-gm6j
cvssv3.1 9.3 https://nvd.nist.gov/vuln/detail/CVE-2021-21428
generic_textual CRITICAL https://nvd.nist.gov/vuln/detail/CVE-2021-21428
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2021-21428
https://github.com/OpenAPITools/openapi-generator/blob/c6530519975341d7784a252132b2f0854f488901/modules/openapi-generator-online/src/main/java/org/openapitools/codegen/online/service/Generator.java#L184-L187
https://github.com/OpenAPITools/openapi-generator/pull/8788
https://github.com/OpenAPITools/openapi-generator/security/advisories/GHSA-23x4-m842-fmwf
https://github.com/swagger-api/swagger-codegen/security/advisories/GHSA-pc22-3g76-gm6j
https://nvd.nist.gov/vuln/detail/CVE-2021-21428
GHSA-23x4-m842-fmwf https://github.com/advisories/GHSA-23x4-m842-fmwf
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Found at https://github.com/OpenAPITools/openapi-generator
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Found at https://github.com/OpenAPITools/openapi-generator/blob/c6530519975341d7784a252132b2f0854f488901/modules/openapi-generator-online/src/main/java/org/openapitools/codegen/online/service/Generator.java#L184-L187
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Found at https://github.com/OpenAPITools/openapi-generator/pull/8788
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Found at https://github.com/OpenAPITools/openapi-generator/security/advisories/GHSA-23x4-m842-fmwf
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Found at https://github.com/swagger-api/swagger-codegen/security/advisories/GHSA-pc22-3g76-gm6j
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2021-21428
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.15957
EPSS Score 0.0005
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-12T01:58:34.961670+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.6.0