CVE-2021-4268

HIGH Year: 2021
CVSS v3 Score
8.8
High
Weakness Type
CWE-863
View all →

Vulnerability Description

A vulnerability, which was classified as problematic, was found in phpRedisAdmin up to 1.17.3. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 1.18.0 is able to address this issue. The name of the patch is b9039adbb264c81333328faa9575ecf8e0d2be94. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216471.

Related Vulnerabilities

CVE-2010-3782

HIGH
CVSS:8.8(High)

obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation.

CWE-8632010

CVE-2016-4572

HIGH
CVSS:8.8(High)

In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges.

CWE-8632016

CVE-2017-0910

HIGH
CVSS:8.8(High)

In Zulip Server before 1.7.1, on a server with multiple realms, a vulnerability in the invitation system lets an authorized user of one realm on the server create a user account on any other realm.

CWE-8632017

CVE-2017-10805

HIGH
CVSS:8.8(High)

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the OAuth module allows remote authenticated users to hijack OAu...

CWE-8632017

CVE-2017-15695

HIGH
CVSS:8.8(High)

When an Apache Geode server versions 1.0.0 to 1.4.0 is configured with a security manager, a user with DATA:WRITE privileges is allowed to deploy code by invoking an internal Geode function. This allo...

CWE-8632017

CVE-2017-2305

HIGH
CVSS:8.8(High)

On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create privileged users, allowi...

CWE-8632017