CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2021/04/29 3:15 p.m.•12 views

CVE-2021-30224

Cross Site Request Forgery CSRF in Rukovoditel v2.8.3 allows attackers to create an admin user with an arbitrary credentials...

8.8CVSS0.00689EPSS

Exploits1References2

Prion•added 2021/04/29 3:15 p.m.•11 views

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF in Rukovoditel v2.8.3 allows attackers to create an admin user with an arbitrary credentials...

6.8CVSS8.8AI score0.00689EPSS

Exploits1References2Affected Software1

CVE•added 2021/04/29 2:57 p.m.•45 views

CVE-2021-30224

The CVE-2021-30224 entry concerns Rukovoditel v2.8.3 vulnerable to Cross-Site Request Forgery (CSRF). The root cause is that the web application does not adequately verify request origin, allowing an attacker to create an admin user with arbitrary credentials. Affected software is Rukovoditel v2....

8.8CVSS8.7AI score0.00689EPSS

Exploits1References2Affected Software1