CVE-2021-43156: CSRF
Published Dec 22, 2021
·Updated
In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admindelete.php allows a remote attacker to delete any book.
Affected Software
1 affected component
Projectworlds Online Book Store Project In Php=1.0
Event History
Dec 22, 2021
CVE Published
via MITRE·05:22 PM
Data Sourced
via MITRE·05:22 PM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-43156?
CVE-2021-43156 is a CSRF vulnerability in ProjectWorlds Online Book Store PHP 1.0 that allows a remote attacker to delete any book.
2
What is the severity of CVE-2021-43156?
CVE-2021-43156 has a severity rating of medium, with a severity value of 6.5.
3
How does CVE-2021-43156 affect ProjectWorlds Online Book Store PHP 1.0?
CVE-2021-43156 allows a remote attacker to delete any book in ProjectWorlds Online Book Store PHP 1.0.
4
Is there a fix for CVE-2021-43156?
At the time of writing, there is no known fix for CVE-2021-43156. It is recommended to follow the discussion on the GitHub issue page for any updates.
5
What can I do to protect my installation of ProjectWorlds Online Book Store PHP 1.0 from CVE-2021-43156?
As a temporary measure, you can restrict access to the admin_delete.php file and ensure that only authorized administrators can access it.