CVE-2021-42950 - CVE House
Back to Database
Status published High CVE-2021-42950

Remote Code Execution (RCE) vulnerability exists in Zepl Notebooks all...

Vulnerability Description

Remote Code Execution (RCE) vulnerability exists in Zepl Notebooks all previous versions before October 25 2021. Users can register for an account and are allocated a set number of credits to try the product. Once users authenticate, they can proceed to create a new organization by which additional users can be added for various collaboration abilities, which allows malicious user to create new Zepl Notebooks with various languages, contexts, and deployment scenarios. Upon creating a new notebook with specially crafted malicious code, a user can then launch remote code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-42950

Credits & Attribution

No credits recorded in the NVD database.

References

More from zepl

View All →
CVE-2021-42952
Zepl Notebooks before 2021-10-25 are affected by a sandbox escape...
Critical 9.9

Affected Vendor

Affected Software

zepl
Vulnerable Versions:
0

Timeline

Official Publish: March 3rd, 2022
Last Modified: July 9th, 2026
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.