CVE-2021-3523

CVSS v3 Score
7.5
High
CVSS v2 Score
4.3
Medium

Vulnerability Description

A flaw was found in 3Scale APICast in versions prior to 2.11.0, where it incorrectly identified connections for reuse. This flaw allows an attacker to bypass security restrictions for an API request when hosting multiple APIs on the same IP address.

CVSS:7.5(High)

Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modify the inherited NTFS permissions, which may cause the directories to have less re...

CVSS:7.5(High)

The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and ...

CVSS:7.5(High)

An access permission override in Apache Struts 2.0.0 to 2.5.20 may cause a Denial of Service when performing a file upload.

CVSS:7.5(High)

An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. There are weak permissions for configuration files.

CVSS:7.5(High)

An issue was discovered in Mattermost Server before 5.18.0. It has weak permissions for server-local file storage.

CVSS:7.5(High)

In Joomla! before 3.9.19, the default settings of the global textfilter configuration do not block HTML inputs for Guest users.