CVE-2021-45017

2021-12-1522:18:29

mitre

www.cve.org

cross site request forgery

catfish

html file

google editor

menu url

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

43.7%

JSON

Cross Site Request Forgery (CSRF) vulnerability exits in Catfish <=6.1.* when you upload an html file containing CSRF on the website that uses a google editor; you can specify the menu url address as your malicious url address in the Add Menu column.

References

github.com/xwlrbh/Catfish/issues/8