CVE-2021-27522

🗓️ 08 Apr 2021 16:13:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 41 Views🌐 WEB

Learnsite 1.2.5.0 remote privilege escalation vulnerability in /Manager/index.asp

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
NVD	CVE-2021-27522	8 Apr 202116:15	–	nvd
Cvelist	CVE-2021-27522	8 Apr 202115:13	–	cvelist
Prion	Privilege escalation	8 Apr 202116:15	–	prion
CNVD	Learnsite Remote Elevation of Privilege Vulnerability	9 Apr 202100:00	–	cnvd

Nvd

Node

learnsite_project learnsiteMatch1.2.5.0

Source	Link
github	www.github.com/WaterCountry/Learnsite/issues/1

Parameter	Position	Path	Description	CWE
user cookie	path	/Manager/index.aspx	Remote privilege escalation vulnerability allowing access to administrator privileges via cookie manipulation.	CWE-287

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Apr 2021 16:15Current

8.8High risk

Vulners AI Score8.8

CVSS26.5

CVSS38.8

EPSS0.00548

CWE-287