CVE-2020-21321

2021-09-1522:15:07

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.6%

emlog v6.0 contains a Cross-Site Request Forgery (CSRF) via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles.

CPENameOperatorVersion
emlogeq5.3.1
emlogeqemlog_5.2.0
emlogeqemlog_5.2.1
emlogeq6.0.0
emlogeqemlog_5.3.0
emlogeqemlog_5.1.3
emlogeqemlog_5.1.2

Name	Operator	Version
emlog	eq	5.3.1
emlog	eq	emlog_5.2.0
emlog	eq	emlog_5.2.1
emlog	eq	6.0.0
emlog	eq	emlog_5.3.0
emlog	eq	emlog_5.1.3
emlog	eq	emlog_5.1.2

References

github.com/emlog/emlog/issues/50