3 matches found
CVE-2021-23266
An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages to mislead the administrator.
CVE-2021-23265
A logged-in and authenticated user with a Reviewer Role may lock a content item.
CVE-2021-23261
Authenticated administrators may override the system configuration file and cause a denial of service.