vulnerability
FreeBSD: VID-60624f63-9180-11ed-acbe-b42e991fc52e (CVE-2021-44521): cassandra3 -- arbitrary code execution
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:M/Au:S/C:C/I:C/A:C) | Jan 11, 2023 | Jan 13, 2023 | Dec 10, 2025 |
Severity
9
CVSS
(AV:N/AC:M/Au:S/C:C/I:C/A:C)
Published
Jan 11, 2023
Added
Jan 13, 2023
Modified
Dec 10, 2025
Description
Marcus Eriksson reports: When running Apache Cassandra with the following configuration: enable_user_defined_functions: true enable_scripted_user_defined_functions: true enable_user_defined_functions_threads: false it is possible for an attacker to execute arbitrary code on the host. The attacker would need to have enough permissions to create user defined functions in the cluster to be able to exploit this.
Solution
freebsd-upgrade-package-cassandra3
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.