CVEvulnerability

CVE-2021-41976

5.3 MEDIUM Published 2021-10-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-10-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-285, CWE-306

Description

Tad Uploader edit book list function is vulnerable to authorization bypass, thus remote attackers can use the function to amend the folder names in the book list without logging in.

Affected configurations

• tad uploader project tad uploader (< 3.5.4)

Related

Weakness · CWE (2)

  • CWE-285 Improper Authorization weakness
  • CWE-306 Missing Authentication for Critical Functionality weakness

References