Vuln: CVE-2021-44521 | Detection.FYI

Cassandra JavaScript UDF Creation

Sep 19, 2026 · Domain: Network Use Case: Network Security Monitoring Use Case: Threat Detection Use Case: Vulnerability Tactic: Execution Data Source: Network Packet Capture Resources: Investigation Guide Noise: Unknown Performance: Fast Profile: Recommended Threat: Vulnerability Exploit Rule Type: Event Correlation (EQL) Vuln: CVE-2021-44521 ·
Share on:

Identifies Cassandra Query Language statements that create a JavaScript user-defined function. On vulnerable and dangerously configured Cassandra servers, adversaries can abuse scripted UDF creation to escape the JavaScript sandbox and execute operating-system commands, including through CVE-2021-44521.

Read More