CVE-2021-3932: twill is vulnerable to Cross-Site Request… – CVSS 4.3 · Watchpost

← All vulnerabilities

twill is vulnerable to Cross-Site Request Forgery (CSRF)

보통 4.3CVE-2021-3932 · GHSA-f99g-pg48-wrfc · Published 13/11/2021 · updated 17/06/2026

요약

CVE-2021-3932은(는) area17/twill, twill (area17)에 영향을 주는 보통 (CVSS 4.3) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.41%, 전체 취약점의 35.1%보다 높음.
조치: 2.5.3, 1.2.5 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
area17/twill Packagist	`≥ 2.0.0, < 2.5.3< 1.2.5`	`2.5.31.2.5`
twill area17	`≤ 2.5.2`	No fix yet

Description

twill is vulnerable to Cross-Site Request Forgery (CSRF).

NVD description

twill is vulnerable to Cross-Site Request Forgery (CSRF)

References

nvd.nist.gov/vuln/detail/CVE-2021-3932 · ADVISORY
area17/twill commit 5cded9f · WEB
area17/twill commit 81d80d1 · WEB
area17/twill · PACKAGE
area17/twill · WEB
area17/twill release 1.2.5 · WEB
area17/twill release 2.5.3 · WEB
huntr.dev/bounties/6ef21e34-f6d9-445a-b657-375c53dc2b43 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free