CVE-2021-20126

Draytek VigorConnect 1.6.0-B3 lacks cross-site request forgery protections and does not sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request...

CVE-2021-20126

creationtimestamp| type| source ---|---|--- 2021-10-13 20:26:49+00:00| seen| https://t.me/cibsecurity/30520...

CVE-2021-20126

Draytek VigorConnect 1.6.0-B3 lacks cross-site request forgery protections and does not sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request...

CVE-2021-20126

Draytek VigorConnect 1.6.0-B3 is affected by a cross-site request forgery vulnerability due to missing protections and insufficient verification that requests are intentional from the authenticated user. The available sources describe the issue and impacted version but do not provide exploit deta...