Lucene search
MitreVULNRICHMENT:CVE-2021-30141HistoryApr 05, 2021 - 10:44 p.m.
CVE-2021-30141
2021-04-0522:44:54
mitre
github.com
2
cve-2021-30141
friendica
userexport.php
anonymous users
memory consumption
null array offset
Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted access to an array offset on a value of type null, and excessive memory consumption. NOTE: the vendor states "the feature still requires a valid authentication cookie even if the route is accessible to non-logged users.
Related
cvelist
cvelist
CVE-2021-30141
2021-04-05 22:44:54
prion
prion
Design/Logic Flaw
2021-04-05 23:15:00
nvd
nvd
CVE-2021-30141
2021-04-05 23:15:12
cve
cve
CVE-2021-30141
2021-04-05 23:15:12
AI Score
7
Confidence
Low
SSVC
Exploitation
poc
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2021-30141