vulnerability
Ubuntu: (CVE-2021-45844): freecad vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:H/Au:N/C:C/I:C/A:C) | Jan 25, 2022 | Jun 26, 2025 | Mar 27, 2026 |
Severity
8
CVSS
(AV:N/AC:H/Au:N/C:C/I:C/A:C)
Published
Jan 25, 2022
Added
Jun 26, 2025
Modified
Mar 27, 2026
Description
Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename.
Solution
no-fix-ubuntu-package
References
- CVE-2021-45844
- https://attackerkb.com/topics/CVE-2021-45844
- CWE-78
- EUVD-EUVD-2021-32562
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-32562
- https://forum.freecadweb.org/viewtopic.php?t=64733
- https://github.com/FreeCAD/FreeCAD/releases/tag/0.19.4
- https://tracker.freecad.org/view.php?id=4809
- https://www.cve.org/CVERecord?id=CVE-2021-45844
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.