CVE-2021-36444

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-36444
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-36444.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-36444
Published
2023-02-03T18:15:09.883Z
Modified
2026-07-09T05:44:32.083031Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Cross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page.

References

Affected packages

Git / github.com/peacexie/imcat

Affected ranges

Type
GIT
Repo
https://github.com/peacexie/imcat
Events
Introduced
f003ca09f1a1c4718ea0bf3643af33ecca4b6bd2
Last affected
f003ca09f1a1c4718ea0bf3643af33ecca4b6bd2
Database specific 
{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:txjia:imcat:5.4:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "5.4"
        },
        {
            "last_affected": "5.4"
        }
    ]
}

Affected versions

5.*
5.4
v5.*
v5.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-36444.json"