CVE-2021-27020: Puppet Enterprise

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export.

Affected products

• Puppet Puppet Enterprise: before 2019.8.6 (fixed in 2019.8.6)

Published 2021-08-30. Last modified 2026-06-17.