CVE-2021-3964: elgg is vulnerable to Authorization Bypass… – CVSS 5.9 · Watchpost

← All vulnerabilities

elgg is vulnerable to Authorization Bypass Through User-Controlled Key

中危 5.9CVE-2021-3964 · GHSA-gwpx-q2h9-wxgx · Published 01/12/2021 · updated 17/06/2026

要点

CVE-2021-3964 是影响 elgg/elgg, elgg (elgg) 的中危 (CVSS 5.9)漏洞。
未来 30 天内被利用的概率（EPSS）：0.80%，高于 56.9% 的漏洞。
修复：升级到 3.3.22 或更高版本。

Package	Affected versions	Patched versions
elgg/elgg Packagist	`< 3.3.22`	`3.3.22`
elgg elgg	`< 3.3.22`	`3.3.22`

Description

elgg is vulnerable to Authorization Bypass Through User-Controlled Key

NVD description

elgg is vulnerable to Authorization Bypass Through User-Controlled Key

References

nvd.nist.gov/vuln/detail/CVE-2021-3964 · ADVISORY
elgg/elgg commit d9fcad7 · WEB
elgg/elgg · WEB
huntr.dev/bounties/a4df45d6-b739-4299-967f-c960b569383a · WEB

elgg/elgg 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free