This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in     backends (result stores). When reading task metadata from the backend, the data is deserialized. Given     that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they     could trigger a stored command injection vulnerability and potentially gain further access to the system.
    (CVE-2021-23727)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in
    backends (result stores). When reading task metadata from the backend, the data is deserialized. Given
    that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they
    could trigger a stored command injection vulnerability and potentially gain further access to the system.
    (CVE-2021-23727)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0a38a0d9-757f-4ac3-9561-b439e933dfa9 advisory.

  - This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in     backends (result stores). When reading task metadata from the backend, the data is deserialized. Given     that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they     could trigger a stored command injection vulnerability and potentially gain further access to the system.
    (CVE-2021-23727)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
223666	Linux Distros Unpatched Vulnerability : CVE-2021-23727	Nessus	Misc.	Local	high
417886	SCA: security update for celery (GHSA-q4xr-rc97-m4xx)	Tenable Cloud Security	SCA Checks	Local	high
417886	SCA: security update for celery (GHSA-q4xr-rc97-m4xx)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
174304	FreeBSD : py39-celery -- command injection vulnerability (0a38a0d9-757f-4ac3-9561-b439e933dfa9)	Nessus	FreeBSD Local Security Checks	Local	high

Detections

Analytics

CVE-2021-23727

high

Tenable Plugins

high

high

high

high