Return to CVE list

CVE-2021-21937

6.5
Medium

CVE-2021-21937

talos-cna@cisco.com
Modified
View on MITREFind on GitHub

Description

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘host_alt_filter’ parameter. This can be done as any authenticated user or through cross-site request forgery.

Exploits

No known exploits found for this CVE.

Search Exploit-DB

References

talos-cna@cisco.com
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1366
af854a3a-2127-422b-91ae-364da2661108
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1366