Lucene search
GoogleOSV:GHSA-HX6G-Q9V2-XH7VHistoryDec 16, 2021 - 3:30 p.m.
Information exposure in elgg
2021-12-1615:30:48
Google
osv.dev
11
elgg
exposure
personal information
admin gatekeeper
ajax
vulnerability
EPSS
0.002
Percentile
58.6%
elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor. Forms in the view namespace ‘forms/admin’ were not protected by an AdminGatekeeper in case of AJAX requests to ‘ajax/form/admin/’.
Related
cve
cve
CVE-2021-3980
2021-12-03 15:15:08
prion
prion
Code injection
2021-12-03 15:15:00
nvd
nvd
CVE-2021-3980
2021-12-03 15:15:08
huntr
huntr
in elgg/elgg
2021-11-18 14:44:17
veracode
veracode
Information Disclosure
2021-12-06 06:21:56
github
github
Information exposure in elgg
2021-12-16 15:30:48
osv
osv
CVE-2021-3980
2021-12-03 15:15:08
cvelist
cvelist