CVE-2021-3964

creationtimestamp| type| source ---|---|--- 2021-12-01 14:35:41+00:00| seen| https://t.me/cibsecurity/33182...

CVE-2021-3964

elgg is vulnerable to Authorization Bypass Through User-Controlled Key...

CVE-2021-3964 Authorization Bypass Through User-Controlled Key in elgg/elgg

elgg is vulnerable to Authorization Bypass Through User-Controlled Key...

CVE-2021-3964

The CVE-2021-3964 entry describes an authorization bypass in the Elgg social networking engine caused by a user-controlled key (e.g., user_guid) that can grant access to restricted resources. Multiple connected sources (NVD, Red Hat, GHSA, OSV, CVE list) corroborate the vulnerability in elgg/elgg...