CVE-2021-29995: CSRF
First published: Wed Jun 09 2021(Updated: )
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cloverdx Cloverdx | <5.7.1 | |
| Cloverdx Cloverdx | >=5.8.0<5.8.2 | |
| Cloverdx Cloverdx | >=5.9.0<5.9.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-29995?
CVE-2021-29995 is a Cross Site Request Forgery (CSRF) vulnerability in Server Console in CloverDX through 5.9.0.
How does CVE-2021-29995 impact CloverDX?
CVE-2021-29995 allows remote attackers to execute any action as the logged-in user, including script execution.
Which versions of CloverDX are affected by CVE-2021-29995?
CloverDX versions 5.7.1, 5.8.0 to 5.8.2, and 5.9.0 are affected by CVE-2021-29995.
How can CVE-2021-29995 be resolved?
CVE-2021-29995 is resolved in CloverDX versions 5.10, 5.9.1, 5.8.2, and 5.7.1.
What is the severity rating of CVE-2021-29995?
CVE-2021-29995 has a severity rating of 8.8 (high).
- collector/nvd-index
- vendor/cloverdx
- canonical/cloverdx cloverdx
- version/cloverdx cloverdx/5.8.0
- version/cloverdx cloverdx/5.9.0