ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-41975

—
CVSS 3.1
9.1 critical
EPSS
1%p70
Published
()
Modified
Description

TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files in the system without logging in.

Vendors
tadtools project
Products
tadtools
Weakness
CWE-285, CWE-306
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news

No ingested article mentions this CVE yet.