CVE-2021-3964

elgg is vulnerable to Authorization Bypass Through User-Controlled Key...

CVE-2021-3964

The CVE-2021-3964 entry describes an authorization bypass in the Elgg social networking engine caused by a user-controlled key (e.g., user_guid) that can grant access to restricted resources. Multiple connected sources (NVD, Red Hat, GHSA, OSV, CVE list) corroborate the vulnerability in elgg/elgg...

CVE-2021-3964 Authorization Bypass Through User-Controlled Key in elgg/elgg

elgg is vulnerable to Authorization Bypass Through User-Controlled Key...