elgg is vulnerable to Authorization Bypass Through User-Controlled Key

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2021-3964 · ADVISORY
• elgg/elgg commit d9fcad7 · WEB
• elgg/elgg · WEB
• huntr.dev/bounties/a4df45d6-b739-4299-967f-c960b569383a · WEB

Lỗ hổng khác của elgg/elgg

• CVE-2021-4072TRUNG BÌNH 5.4elgg is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-3980CAO 7.5elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor
• CVE-2011-2935TRUNG BÌNH 6.1Elgg through 1.7.10 has XSS
• CVE-2019-11016TRUNG BÌNH 6.1Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect.