mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-12 13:31:34 +02:00
915 B
915 B
CVE-2021-21933
Description
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this at ‘esn_filter’ parameter. This can be done as any authenticated user or through cross-site request forgery.
POC
Reference
- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1366
- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1366
Github
No PoCs found on GitHub currently.