Lucene search
GoogleOSV:CVE-2021-36443HistoryFeb 03, 2023 - 6:15 p.m.
CVE-2021-36443
2023-02-0318:15:09
Google
osv.dev
3
cve-2021-36443
cross site request forgery
imcat 5.4
remote attackers
escalate privilege
lack of token verification
software
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.9
Confidence
High
EPSS
0.002
Percentile
52.5%
Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification.
References
Related
prion
prion
Cross site request forgery (csrf)
2023-02-03 18:15:00
cvelist
cvelist
CVE-2021-36443
2023-02-03 00:00:00
nvd
nvd
CVE-2021-36443
2023-02-03 18:15:09
cve
cve
CVE-2021-36443
2023-02-03 18:15:09
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.9
Confidence
High
EPSS
0.002
Percentile
52.5%
Related for OSV:CVE-2021-36443