CVE-2021-27885: CSRF
Published Mar 2, 2021
·Updated
usersettings.php in e107 through 2.3.0 lacks a certain eTOKEN protection mechanism.
Affected Software
1 affected component
e107 e107<=2.3.0
Remediation
Event History
Mar 2, 2021
CVE Published
via MITRE·06:15 PM
Data Sourced
via MITRE·06:15 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this e107 vulnerability?
The vulnerability ID for this e107 vulnerability is CVE-2021-27885.
2
What is the severity of CVE-2021-27885?
CVE-2021-27885 has a severity score of 8.8 (High).
3
What is the affected software for CVE-2021-27885?
The affected software for CVE-2021-27885 is e107 version 2.3.0.
4
What is the description of CVE-2021-27885?
CVE-2021-27885 is a vulnerability in e107 where usersettings.php lacks a certain e_TOKEN protection mechanism.
5
How do I fix CVE-2021-27885?
To fix CVE-2021-27885, update e107 to a version that includes the fix, such as version 2.3.1 or later. Make sure to follow the official e107 release and security announcements for the latest updates.