CVE-2021-45379

—

CVSS 3.1

8.8 high

EPSS

1%p61

Published

Dec 30, 2021 (Dec 30, 2021)

Modified

Jun 17, 2026

Description

Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user can attempt to log in as another user without its password.

Vendors: glewlwyd project
Products: glewlwyd
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.