CVE-2021-4276

CVE-2021-4276 describes an SQL injection vulnerability in the DSCIOManager::dsc_import_input_from_source function within the dns-stats hedgehog product. This vulnerability is rated as problematic and affects an unsupported product. With a CVSSv3 score of 8.8 (High), this vulnerability can be exploited remotely with low attack complexity, potentially leading to high impact on confidentiality, integrity, and availability. However, it is assumed that the Data Manager server, where the attack would originate, is only accessible by authorized users, limiting the practical attack surface. While the exploit has been publicly disclosed, its real existence is doubted, and there is no evidence of active exploitation, Metasploit modules, Nuclei templates, or ExploitDB entries. Community discussion and media coverage are also minimal.