Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-21549

Опубликовано: 21 мая 2021
Источник: nvd
CVSS3: 8.8
CVSS2: 6.8
EPSS Низкий

Описание

Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged attacker could potentially exploit this vulnerability, leading to a privileged victim application user being tricked into sending state-changing requests to the vulnerable application, causing unintended server operations.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:dell:xtremio_management_server:*:*:*:*:*:*:*:*
Версия до 6.3.3-8 (исключая)

Одно из

cpe:2.3:h:dell:xtremio_x1:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:xtremio_x2:-:*:*:*:*:*:*:*

EPSS

Процентиль: 31%
0.00116
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352
CWE-352

Связанные уязвимости

github логотип

GHSA-xx5f-9pxf-9c8j

github
около 3 лет назад

Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged attacker could potentially exploit this vulnerability, leading to a privileged victim application user being tricked into sending state-changing requests to the vulnerable application, causing unintended server operations.

EPSS

Процентиль: 31%
0.00116
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352
CWE-352