Lucene search
TalosCVELIST:CVE-2021-21823HistoryAug 20, 2021 - 5:24 p.m.
CVE-2021-21823
2021-08-2017:24:13
CWE-359
talos
www.cve.org
4
komoot
information disclosure
friend finder
network requests
vulnerability
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
7.4
Confidence
High
EPSS
0.002
Percentile
53.8%
An information disclosure vulnerability exists in the Friend finder functionality of GmbH Komoot version 10.26.9 up to 11.1.11. A specially crafted series of network requests can lead to the disclosure of sensitive information.
CNA Affected
[
{
"product": "Komoot",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Komoot GmbH Komoot 10.26.9 , Komoot GmbH Komoot 11.0.14 ,Komoot GmbH Komoot 11.1.11"
}
]
}
]Related
prion
prion
Information disclosure
2021-08-20 18:15:00
nvd
nvd
CVE-2021-21823
2021-08-20 18:15:07
talos
talos
Komoot GmbH Komoot Friend finder information disclosure vulnerability
2021-06-09 00:00:00
cve
cve
CVE-2021-21823
2021-08-20 18:15:07
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
7.4
Confidence
High
EPSS
0.002
Percentile
53.8%
Related for CVELIST:CVE-2021-21823