CVE-2021-21937

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘host_alt_filter’ parameter. This can be done as any authenticated user or through cross-site request forgery.

Summary:

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘host_alt_filter’ parameter. This can be done as any authenticated user or through cross-site request forgery.

Reference Links(if available):

  • https://talosintelligence.com/vulnerability_reports/TALOS-2021-1366
  • CVSS Score (if available)

    v2: / MEDIUM

    v3: /

    Links to Exploits(if available)