CVE-2021-37366

ALTO 8.8CVE-2021-37366 · Published 10/08/2021 · updated 17/06/2026

In breve

CVE-2021-37366 è una vulnerabilità ALTO (CVSS 8.8) che riguarda ctparental (ctparental project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.51%, superiore al 43.6% delle vulnerabilità.
Correzione: aggiornare a 4.45.03 o successiva.

Package	Affected versions	Patched versions
ctparental ctparental_project	`< 4.45.03`	`4.45.03`

Description

CTparental before 4.45.03 is vulnerable to cross-site request forgery (CSRF) in the CTparental admin panel. By combining CSRF with XSS, an attacker can trick the administrator into clicking a link that cancels the filtering for all standard users.

References

gist.github.com/securylight/092ba96a660e07ad76f2a380c2eaa75a · Third Party Advisory
gitlab.com/marsat/CTparental · Third Party Advisory

Altre vulnerabilità di ctparental

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free