14 Avr 2021
Vulnérabilité CVE-2021-27181 CVE Vulnerability
An issue was discovered in MDaemon before 20.0.4. Remote Administration allows an attacker to perform a fixation of the anti-CSRF token. In order to exploit this issue, the user has to click on a malicious URL provided by the attacker and successfully authenticate into the application. Having the value of the anti-CSRF token, the attacker may trick the user into visiting his malicious page and performing any request with the privileges of attacked user. (CVSS:6.8) (Last Update:2021-04-21)
Vulnerability Details : An issue was discovered in MDaemon before 20.0.4. Remote Administration allows an attacker to perform a fixation of the anti-CSRF token. In order to exploit this issue, the user has to click on a malicious URL provided by the attacker and successfully authenticate into the application. Having the value of the anti-CSRF token, the attacker may trick the user into visiting his malicious page and performing any request with the privileges of attacked user. Publish Date : 2021-04-14 Last Update Date : 2021-04-21 - CVSS Scores & Vulnerability Types
- Products Affected By CVE-2021-27181
- Number Of Affected Versions By Product
- References For CVE-2021-27181
| ||||||||||||||||||||||||||||||||||||||||||||||||||||
- Metasploit Modules Related To CVE-2021-27181There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information) |