CVE-2021-39394

mm-wiki v0.2.1 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add user accounts and modify user information...

CVE-2021-39394

CVE-2021-39394 affects mm-wiki v0.2.1, where a Cross-Site Request Forgery (CSRF) allows an attacker to arbitrarily add user accounts and modify user information. The NVD entry lists CVSS‑3.1 base score 6.5 (Medium) with network vector, low attack complexity, no privileges required, but user inter...