PT-2021-23464 · Unknown · Tad Uploader

Hsuan · Published 2021-10-08 · Updated 2022-08-12 · CVE-2021-41976

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Tad Uploader (affected versions not specified)

Description The Tad Uploader edit book list function is vulnerable to authorization bypass. This allows remote attackers to amend the folder names in the book list without logging in.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Missing Authentication

Weakness Enumeration

CWE-285

CWE-306

Related Identifiers

CVE-2021-41976

Affected Products

Tad Uploader

References · 4

• https://osv.dev/vulnerability/CVE-2021-41976 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41976 · Security Note
• https://t.me/cibsecurity/30263 · Telegram Post
• https://twcert.org.tw/tw/cp-132-5175-a2f8d-1.html · Note