CVE-2021-25976
- Source
- https://cve.org/CVERecord?id=CVE-2021-25976
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-25976.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-25976
- Aliases
- Published
- 2021-11-16T09:15:06Z
- Modified
- 2026-10-20T10:54:34Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In PiranhaCMS, versions 4.0.0-alpha1 to 9.2.0 are vulnerable to cross-site request forgery (CSRF) when performing various actions supported by the management system, such as deleting a user, deleting a role, editing a post, deleting a media folder etc., when an ID is known.
- References
Affected packages
Git / github.com/piranhacms/piranha.core
Affected ranges
- Type
- GIT
- Repo
- https://github.com/piranhacms/piranha.core
- Events
-
IntroducedLast AffectedIntroducedLast AffectedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:dotnetfoundation:piranha_cms:*:*:*:*:*:*:*:*", "range": [ { "introduced": "4.0.1" }, { "last_affected": "9.2" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:dotnetfoundation:piranha_cms:4.0.0:-:*:*:*:*:*:*", "range": [ { "introduced": "4.0.0-NA" }, { "last_affected": "4.0.0-NA" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:dotnetfoundation:piranha_cms:4.0.0:alpha1:*:*:*:*:*:*", "range": [ { "introduced": "4.0.0-alpha1" }, { "last_affected": "4.0.0-alpha1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:dotnetfoundation:piranha_cms:4.0.0:alpha3:*:*:*:*:*:*", "range": [ { "introduced": "4.0.0-alpha3" }, { "last_affected": "4.0.0-alpha3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:dotnetfoundation:piranha_cms:4.0.0:alpha4:*:*:*:*:*:*", "range": [ { "introduced": "4.0.0-alpha4" }, { "last_affected": "4.0.0-alpha4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:dotnetfoundation:piranha_cms:4.0.0:alpha5:*:*:*:*:*:*", "range": [ { "introduced": "4.0.0-alpha5" }, { "last_affected": "4.0.0-alpha5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:dotnetfoundation:piranha_cms:4.0.0:alpha6:*:*:*:*:*:*", "range": [ { "introduced": "4.0.0-alpha6" }, { "last_affected": "4.0.0-alpha6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:dotnetfoundation:piranha_cms:4.0.0:alpha7:*:*:*:*:*:*", "range": [ { "introduced": "4.0.0-alpha7" }, { "last_affected": "4.0.0-alpha7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:dotnetfoundation:piranha_cms:4.0.0:alpha8:*:*:*:*:*:*", "range": [ { "introduced": "4.0.0-alpha8" }, { "last_affected": "4.0.0-alpha8" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:dotnetfoundation:piranha_cms:4.0.0:alpha9:*:*:*:*:*:*", "range": [ { "introduced": "4.0.0-alpha9" }, { "last_affected": "4.0.0-alpha9" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:dotnetfoundation:piranha_cms:4.0.0:beta1:*:*:*:*:*:*", "range": [ { "introduced": "4.0.0-beta1" }, { "last_affected": "4.0.0-beta1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:dotnetfoundation:piranha_cms:4.0.0:rc1:*:*:*:*:*:*", "range": [ { "introduced": "4.0.0-rc1" }, { "last_affected": "4.0.0-rc1" } ], "source": "CPE_STRING" }, { "range": [ { "fixed": "e42abacdd0dd880ce9cf6607efcc24646ac82eda" } ], "source": "REFERENCES_COMMIT" } ] }
Affected versions
4.*
4.0.0-NA
4.0.0-alpha1
4.0.0-alpha3
4.0.0-alpha4
4.0.0-alpha5
4.0.0-alpha6
4.0.0-alpha7
4.0.0-alpha8
4.0.0-alpha9
4.0.0-beta1
4.0.0-rc1
v4.*
v4.0.1
v4.1.0
v4.1.0-alpha1
v4.1.0-beta1
v4.1.0-beta2
v4.2.0
v4.2.0-alpha1
v4.2.0-alpha2
v4.2.0-beta1
v4.2.1
v4.3.0
v4.3.0-beta1
v5.*
v5.0.0
v5.0.0-alpha1
v5.0.0-beta1
v5.0.1
v5.1.0
v5.1.0-alpha1
v5.1.0-beta1
v5.1.1
v5.1.2
v5.2.0
v5.2.0-beta1
v5.2.0-beta2
v5.2.1
v5.3.0
v5.3.0-beta1
v5.3.1
v5.4.0
v6.*
v6.0.0
v6.0.1
v6.0.2
v6.1.0
v7.*
v7.0-sr2
v7.0-sr3
v7.0-sr4
v7.0-sr5
v7.0.0
v7.0.0-alpha1
v7.0.0-alpha2
v7.0.0-beta1
v7.0.1
v7.1.0
v8.*
v8.0
v8.0-sr1
v8.1
v8.2
v8.3
v8.3-sr1
v8.3-sr2
v8.4
v8.4-sr1
v8.4-sr2
v8.4-sr3
v9.*
v9.0
v9.0-beta1
v9.0-rc1
v9.0-rc2
v9.0-sr1
v9.1
v9.1-alpha1
v9.1-alpha2
v9.1-beta1
v9.1-sr1
v9.2