Vulnerabilities CVE-2021-47754

CVE-2021-47754

Medium

Open

TLP:CLEAR

Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery (CSRF)

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users into submitting the form.

Details

CVSS Score: 6.9
EPSS Score ⓘ: 0.21%

11.6th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L
Confidence: 90%
Published: Jan 15, 2026
Last Modified: Aug 14, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.