mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-28 01:04:30 +00:00
935 B
935 B
CVE-2021-21926
Description
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be done as any authenticated user or through cross-site request forgery at ‘health_filter’ parameter.
POC
Reference
- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1366
- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1366
Github
No PoCs found on GitHub currently.