What is the severity of CVE-2021-41975?

CVE-2021-41975 has been identified as a high severity vulnerability due to its potential for unauthorized file deletion.

How do I fix CVE-2021-41975?

To mitigate CVE-2021-41975, upgrade TadTools to version 3.2.2 or later.

What type of vulnerability is CVE-2021-41975?

CVE-2021-41975 is an authorization bypass vulnerability that allows remote attackers to delete arbitrary files.

Who is affected by CVE-2021-41975?

CVE-2021-41975 affects users of TadTools versions prior to 3.2.2.

Can CVE-2021-41975 be exploited remotely?

Yes, CVE-2021-41975 can be exploited remotely by attackers without the need for authentication.

Vulnerability/
CVE-2021-41975

critical

9.1

CWE

306 285

8/10/2021

21/11/2024

CVE-2021-41975: Tad TadTools - Improper Authorization

First published: Fri Oct 08 2021(Updated: )

TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files in the system without logging in.

Credit: twcert@cert.org.tw twcert@cert.org.tw

Affected Software	Affected Version	How to fix
Array-tools	<3.2.2

Remedy

Update TadTools version to 3.2.2

Never miss a vulnerability like this again

Reference Links

https://www.twcert.org.tw/tw/cp-132-5174-6f1d5-1.html

Frequently Asked Questions

What is the severity of CVE-2021-41975?
CVE-2021-41975 has been identified as a high severity vulnerability due to its potential for unauthorized file deletion.
How do I fix CVE-2021-41975?
To mitigate CVE-2021-41975, upgrade TadTools to version 3.2.2 or later.
What type of vulnerability is CVE-2021-41975?
CVE-2021-41975 is an authorization bypass vulnerability that allows remote attackers to delete arbitrary files.
Who is affected by CVE-2021-41975?
CVE-2021-41975 affects users of TadTools versions prior to 3.2.2.
Can CVE-2021-41975 be exploited remotely?
Yes, CVE-2021-41975 can be exploited remotely by attackers without the need for authentication.

agent/type
agent/weakness
agent/remedy
agent/severity
agent/references
agent/title
agent/description
collector/mitre-cve
source/MITRE
agent/first-publish-date
agent/last-modified-date
agent/author
agent/softwarecombine
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
collector/nvd-api
source/NVD
agent/software-canonical-lookup
vendor/tadtools project
canonical/array-tools

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2021-41975?
CVE-2021-41975 has been identified as a high severity vulnerability due to its potential for unauthorized file deletion.
How do I fix CVE-2021-41975?
To mitigate CVE-2021-41975, upgrade TadTools to version 3.2.2 or later.
What type of vulnerability is CVE-2021-41975?
CVE-2021-41975 is an authorization bypass vulnerability that allows remote attackers to delete arbitrary files.
Who is affected by CVE-2021-41975?
CVE-2021-41975 affects users of TadTools versions prior to 3.2.2.
Can CVE-2021-41975 be exploited remotely?
Yes, CVE-2021-41975 can be exploited remotely by attackers without the need for authentication.