CVE-2021-25991

2021-12-2909:15:09

Google

osv.dev

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.1%

JSON

In Ifme, versions v5.0.0 to v7.32 are vulnerable against an improper access control, which makes it possible for admins to ban themselves leading to their deactivation from Ifme account and complete loss of admin access to Ifme.

CPENameOperatorVersion
ifmeeq7.14.3
ifmeeq7.12.8
ifmeeq7.25.4
ifmeeq7.29.3
ifmeeq7.30.13
ifmeeq6.14.0
ifmeeq7.30.5
ifmeeq7.9.6
ifmeeq7.12.2
ifmeeq7.30.12