CVE-2021-25991

Mô tả

Tham khảo

• ifmeorg/ifme commit d1f570c · Patch
• whitesourcesoftware.com/vulnerability-database/CVE-2021-25991 · Exploit

Lỗ hổng khác của ifme

• CVE-2021-25992NGHIÊM TRỌNG 9.8In Ifme, versions 1.0.0 to v.7.33.2 don’t properly invalidate a user’s session even after the user initiated logout. It makes it possible fo…
• CVE-2021-25990TRUNG BÌNH 5.4In “ifme”, versions v7.22.0 to v7.31.4 are vulnerable against self-stored XSS in the contacts field as it allows loading XSS payloads fetche…
• CVE-2021-25989TRUNG BÌNH 5.4In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability in the markdown editor. It can be exploited by making a…
• CVE-2021-25988TRUNG BÌNH 5.4In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability (notifications section) which can be directly triggered…