CVE-2021-41916

2021-10-0815:31:51

mitre

www.cve.org

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.7%

JSON

A Cross-Site Request Forgery (CSRF) vulnerability in webTareas version 2.4 and earlier allows a remote attacker to create a new administrative profile and add a new user to the new profile. without the victim’s knowledge, by enticing an authenticated admin user to visit an attacker’s web page.

References

n4nj0.github.io/advisories/webtareas-multiple-vulnerabilities-i/