elgg is vulnerable to Authorization Bypass Through User-Controlled Key

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-3964 · ADVISORY
• elgg/elgg commit d9fcad7 · WEB
• elgg/elgg · WEB
• huntr.dev/bounties/a4df45d6-b739-4299-967f-c960b569383a · WEB

elgg/elgg のその他の脆弱性

• CVE-2021-4072中 5.4elgg is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-3980高 7.5elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor
• CVE-2011-2935中 6.1Elgg through 1.7.10 has XSS
• CVE-2019-11016中 6.1Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect.