CVE-2021-4290
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-4290
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-4290.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-4290
- Published
- 2022-12-27T23:15:10Z
- Modified
- 2025-10-21T02:35:57Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A vulnerability was found in DHBW Fallstudie. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file app/config/passport.js of the component Login. The manipulation of the argument id/email leads to sql injection. The name of the patch is 5c13c6a972ef4c07c5f35b417916e0598af9e123. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216907.
- References