CVE-2021-41976

—

CVSS 3.1

5.3 medium

EPSS

1%p62

Published

Oct 8, 2021 (Oct 8, 2021)

Modified

Jun 17, 2026

Description

Tad Uploader edit book list function is vulnerable to authorization bypass, thus remote attackers can use the function to amend the folder names in the book list without logging in.

Vendors: tad uploader project
Products: tad uploader
Weakness: CWE-285, CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.