← back
CVE-2021-29995

CVE-2021-29995

EPSS 4.2%
A Cross Site Request Forgery (CSRF) issue in Server Console in CloverDX through 5.9.0 allows remote attackers to execute any action as the logged-in user (including script execution). The issue is resolved in CloverDX 5.10, CloverDX 5.9.1, CloverDX 5.8.2, and CloverDX 5.7.1.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/163697/CloverDX-5.9.0-Code-Execution-Cross-Site-Request-Forgery.htmlunverifiedexploitdbwww.exploit-db.com/exploits/50166unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/163697/CloverDX-5.9.0-Code-Execution-Cross-Site-Request-Forgery.htmlhttps://support1.cloverdx.com/hc/en-us/articles/360021006520https://support.cloverdx.com/releases/