rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-44052 Arbitrary file read
An improper link resolution before file access ('Link Following') vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, and QTS. If exploited, this vulnerability allows remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. We have already fixed this vulnerability in the following versions of QuTScloud, QuTS hero, and QTS: QuTScloud c5.0.1.1998 and later QuTS hero h4.5.4.1971 build 20220310 and later QuTS hero h5.0.0.1986 build 20220324 and later QTS 4.3.4.1976 build 20220303 and later QTS 4.3.3.1945 build 20220303 and later QTS 4.2.6 build 20220304 and later QTS 4.3.6.1965 build 20220302 and later QTS 5.0.0.1986 build 20220324 and later QTS 4.5.4.1991 build 20220329 and later
Problem types: cwe_id: CWE-59
description: CWE-59
Affected products: vendor: QNAP Systems Inc.
product: QuTScloud
vendor: QNAP Systems Inc.
product: QuTS hero
vendor: QNAP Systems Inc.
product: QTS
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Enio Pena Navarro and Michael Messner from Siemens Energy AG
Published: 2022-05-05T16:50:22.030Z
CVE-2021-44053 Reflected XSS
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QTS, QuTS hero and QuTScloud. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QTS, QuTS hero and QuTScloud: QTS 4.5.4.1991 build 20220329 and later QTS 5.0.0.1986 build 20220324 and later QuTS hero h5.0.0.1986 build 20220324 and later QuTS hero h4.5.4.1971 build 20220310 and later QuTScloud c5.0.1.1949 and later
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: QNAP Systems Inc.
product: QTS
vendor: QNAP Systems Inc.
product: QuTS hero
vendor: QNAP Systems Inc.
product: QuTScloud
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Enio Pena Navarro and Michael Messner from Siemens Energy AG
Published: 2022-05-05T16:50:23.491Z
CVE-2021-44054 Open redirect
An open redirect vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerability in the following versions of QuTScloud, QuTS hero and QTS: QuTScloud c5.0.1.1949 and later QuTS hero h5.0.0.1949 build 20220215 and later QuTS hero h4.5.4.1951 build 20220218 and later QTS 5.0.0.1986 build 20220324 and later QTS 4.5.4.1991 build 20220329 and later
Problem types: cwe_id: CWE-601
description: CWE-601
Affected products: vendor: QNAP Systems Inc.
product: QuTScloud
vendor: QNAP Systems Inc.
product: QuTS hero
vendor: QNAP Systems Inc.
product: QTS
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Enio Pena Navarro and Michael Messner from Siemens Energy AG
Published: 2022-05-05T16:50:24.966Z
CVE-2021-44055 Information leakage in Video Station
An missing authorization vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows remote attackers to access data or perform actions that they should not be allowed to perform. We have already fixed this vulnerability in the following versions of Video Station: Video Station 5.5.9 ( 2022/02/16 ) and later
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: QNAP Systems Inc.
product: Video Station
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Thomas Fady
Published: 2022-05-05T16:50:26.331Z
CVE-2021-44056 Improper authentication in Video Station
An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station 5.5.9 and later Video Station 5.3.13 and later Video Station 5.1.8 and later
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: QNAP Systems Inc.
product: Video Station
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
version: 3.1
Credits: lang: en
value: Thomas Fady
Published: 2022-05-05T16:50:27.692Z
CVE-2021-44057 Improper authentication in Photo Station
An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 6.0.20 ( 2022/02/15 ) and later Photo Station 5.7.16 ( 2022/02/11 ) and later Photo Station 5.4.13 ( 2022/02/11 ) and later
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: QNAP Systems Inc.
product: Photo Station
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
version: 3.1
Credits: lang: en
value: Thomas Fady
Published: 2022-05-05T16:50:29.108Z
CVE-2021-44076 
An issue was discovered in CrushFTP 9. The creation of a new user through the /WebInterface/UserManager/ interface allows an attacker, with access to the administration panel, to perform Stored Cross-Site Scripting (XSS). The payload can be executed in multiple scenarios, for example when the user's page appears in the Most Visited section of the page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-15T12:35:32.000Z
CVE-2021-44077 
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in the Struts configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-29T03:17:45.000Z
CVE-2021-44078 
An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obtain the ability to execute crafted code in the target sandbox in order to exploit this vulnerability. The specific flaw exists within the virtual memory manager. The issue results from the faulty comparison of GVA and GPA while calling uc_mem_map_ptr to free part of a claimed memory block. An attacker can leverage this vulnerability to escape the sandbox and execute arbitrary code on the host machine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-26T04:28:31.000Z
CVE-2021-44079 
In the wazuh-slack active response script in Wazuh 4.2.x before 4.2.5, untrusted user agents are passed to a curl command line, potentially resulting in remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-22T07:00:42.000Z
CVE-2021-44080 
A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators to arbitrary OS commands as root in the device via the connection_type parameter of the statussupport_diagnostic_tracing.json endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-01T00:45:48.000Z
CVE-2021-44081 
A buffer overflow vulnerability exists in the AMF of open5gs 2.1.4. When the length of MSIN in Supi exceeds 24 characters, it leads to AMF denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-29T15:39:05.000Z
CVE-2021-44082 
textpattern 4.8.7 is vulnerable to Cross Site Scripting (XSS) via /textpattern/index.php,Body. A remote and unauthenticated attacker can use XSS to trigger remote code execution by uploading a webshell. To do so they must first steal the CSRF token before submitting a file upload request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-29T22:50:40.000Z
CVE-2021-44087 
A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Attendance and Payroll System v1.0 which allows an unauthenticated remote attacker to upload a maliciously crafted PHP via photo upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-17T21:17:04.000Z
CVE-2021-44088 
An SQL Injection vulnerability exists in Sourcecodester Attendance and Payroll System v1.0 which allows a remote attacker to bypass authentication via unsanitized login parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-17T21:07:34.000Z
CVE-2021-44090 
An SQL Injection vulnerability exists in Sourcecodester Online Reviewer System 1.0 via the password parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T18:43:17.000Z
CVE-2021-44091 
A Cross-Site Scripting (XSS) vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the (1) fullname, (2) phone, and (3) address parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T17:20:56.000Z
CVE-2021-44092 
An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T18:03:20.000Z
CVE-2021-44093 
A Remote Command Execution vulnerability on the background in zrlog 2.2.2, at the upload avatar function, could bypass the original limit, upload the JSP file to get a WebShell
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-28T20:27:43.000Z
CVE-2021-44094 
ZrLog 2.2.2 has a remote command execution vulnerability at plugin download function, it could execute any JAR file
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-28T20:29:20.000Z
CVE-2021-44095 
A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker to compromise Application SQL database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T23:38:07.000Z
CVE-2021-44096 
EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profile_action - update_user. This allows a remote attacker to compromise Application SQL database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T23:38:00.000Z
CVE-2021-44097 
EGavilan Media Contact-Form-With-Messages-Entry-Management 1.0 is vulnerable to SQL Injection via Addmessage.php. This allows a remote attacker to compromise Application SQL database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T23:37:54.000Z
CVE-2021-44098 
EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php. This allows a remote attacker to compromise Application SQL database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-31T23:37:50.000Z
CVE-2021-44108 
A null pointer dereference in src/amf/namf-handler.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of Service via a crafted sbi request to amf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-05T01:22:49.000Z
CVE-2021-44109 
A buffer overflow in lib/sbi/message.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of Service via a crafted sbi request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-05T01:22:50.000Z
CVE-2021-44111 
A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-11T17:21:46.000Z
CVE-2021-44114 
Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Stock Management System in PHP/OOP 1.0, which allows remote malicious users to execute arbitrary remote code execution via create user function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-31T17:42:26.000Z
CVE-2021-44116 
Cross Site Scripting (XSS) vulnerability exits in Anchor CMS <=0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-15T22:00:46.000Z
CVE-2021-44117 
A Cross Site Request Forgery (CSRF) vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/sitevariables/delete/4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-10T12:35:10.000Z
CVE-2021-44118 
SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability. To exploit the vulnerability, a visitor must browse to a malicious SVG file. The vulnerability allows an authenticated attacker to inject malicious code running on the client side into web pages visited by other users (stored XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-26T11:07:57.000Z
CVE-2021-44120 
SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability in ecrire/public/interfaces.php, adding the function safehtml to the vulnerable fields. An editor is able to modify his personal information. If the editor has an article written and available, when a user goes to the public site and wants to read the author's information, the malicious code will be executed. The "Who are you" and "Website Name" fields are vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-26T11:26:27.000Z
CVE-2021-44122 
SPIP 4.0.0 is affected by a Cross Site Request Forgery (CSRF) vulnerability in ecrire/public/aiguiller.php, ecrire/public/balises.php, ecrire/balise/formulaire_.php. To exploit the vulnerability, a visitor must visit a malicious website which redirects to the SPIP website. It is also possible to combine XSS vulnerabilities in SPIP 4.0.0 to exploit it. The vulnerability allows an authenticated attacker to execute malicious code without the knowledge of the user on the website (CSRF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-26T11:47:55.000Z
CVE-2021-44123 
SPIP 4.0.0 is affected by a remote command execution vulnerability. To exploit the vulnerability, an attacker must craft a malicious picture with a double extension, upload it and then click on it to execute it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-26T11:57:30.000Z
CVE-2021-44124 
Hiby Music Hiby OS R3 Pro 1.5 and 1.6 is vulnerable to Directory Traversal. The HTTP Server does not have enough input data sanitization when shown data from SD Card, an attacker can navigate through the device's File System over HTTP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-28T15:08:21.000Z
CVE-2021-44127 
In DLink DAP-1360 F1 firmware version <=v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system commands when the parameter is "name=deleteFile" after being authorized.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-27T19:39:54.000Z
CVE-2021-44132 
A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13_X139 allows attackers to execute arbitrary commands via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T19:38:55.000Z
CVE-2021-44135 
pagekit all versions, as of 15-10-2021, is vulnerable to SQL Injection via Comment listing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-01T13:22:47.000Z
CVE-2021-44138 
There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-04T12:03:05.000Z
CVE-2021-44139 
Sentinel 1.8.2 is vulnerable to Server-side request forgery (SSRF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-23T16:50:05.000Z
CVE-2021-44140 Arbitrary file deletion on logout
Remote attackers may delete arbitrary files in a system hosting a JSPWiki instance, versions up to 2.11.0.M8, by using a carefuly crafted http request on logout, given that those files are reachable to the user running the JSPWiki instance. Apache JSPWiki users should upgrade to 2.11.0 or later.
Problem types: description: CVE-2021-44140
Affected products: vendor: Apache Software Foundation
product: Apache JSPWiki
Credits: lang: en
value: Apache JSPWiki would like to thank haby0 (forhaby0@gmail.com) from Duxiaoman Financial Security Team for discovering and proposing the fix for this issue.
Published: 2021-11-24T11:15:14.000Z
CVE-2021-44141 
All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succeed.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: n/a
product: Samba
Published: 2022-02-21T00:00:00.000Z
CVE-2021-44142 
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: Samba
product: Samba
Published: 2022-02-21T14:30:12.659Z
CVE-2021-44143 
A flaw was found in mbsync in isync 1.4.0 through 1.4.3. Due to an unchecked condition, a malicious or compromised IMAP server could use a crafted mail message that lacks headers (i.e., one that starts with an empty line) to provoke a heap overflow, which could conceivably be exploited for remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-22T19:29:29.000Z
CVE-2021-44144 
Croatia Control Asterix 2.8.1 has a heap-based buffer over-read, with additional details to be disclosed at a later date.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-22T20:28:50.000Z
CVE-2021-44145 Apache NiFi information disclosure by XXE
In the TransformXML processor of Apache NiFi before 1.15.1 an authenticated user could configure an XSLT file which, if it included malicious external entity calls, may reveal sensitive information.
Problem types: description: Sensitive information disclosure
Affected products: vendor: Apache Software Foundation
product: Apache NiFi
Credits: lang: en
value: This issue was discovered by DangKhai at Viettel Cyber Security.
Published: 2021-12-17T08:50:09.000Z
CVE-2021-44147 
An XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-22T21:26:04.000Z
CVE-2021-44148 
GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/router_cgi?action=scanwifi XSS when an attacker creates an SSID with an XSS payload as the name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-07T21:03:05.000Z
CVE-2021-44149 
An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0. The OPTEE-OS CSU driver for NXP i.MX6UL SoC devices lacks security access configuration for wakeup-related registers, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a v cycle.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-07T20:59:43.000Z
CVE-2021-44150 
The client in tusdotnet through 2.5.0 relies on SHA-1 to prevent spoofing of file content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-22T21:51:56.000Z
CVE-2021-44151 
An issue was discovered in Reprise RLM 14.2. As the session cookies are small, an attacker can hijack any existing sessions by bruteforcing the 4 hex-character session cookie on the Windows version (the Linux version appears to have 8 characters). An attacker can obtain the static part of the cookie (cookie name) by first making a request to any page on the application (e.g., /goforms/menu) and saving the name of the cookie sent with the response. The attacker can then use the name of the cookie and try to request that same page, setting a random value for the cookie. If any user has an active session, the page should return with the authorized content, when a valid cookie value is hit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-13T00:00:00.000Z
CVE-2021-44152 
An issue was discovered in Reprise RLM 14.2. Because /goform/change_password_process does not verify authentication or authorization, an unauthenticated user can change the password of any existing user. This allows an attacker to change the password of any known user, thereby preventing valid users from accessing the system and granting the attacker full access to that user's account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-13T00:00:00.000Z