CVE-2021-20096

2021-05-2512:15:07

Google

osv.dev

cve-2021-20096

openoversight

cross-site request forgery

remote attacker

sensitive application actions

crafted link

security vulnerability

software

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

43.0%

JSON

Cross-site request forgery in OpenOversight 0.6.4 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.

References

www.tenable.com/security/research/tra-2021-18