by Kastro
Paper/Archive/CVE-2021-41974

CVE-2021-41974

Tad Tad Book3 — Tad Book3 - Improper Authorization

EPSS 1%CVSS 9.1
critical.is priorityof 100
41
CVSS 9.1 (CNA, NVD agree)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 69.7.697 × 2013.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Tad Book3 editing book page does not perform identity verification. Remote attackers can use the vulnerability to view and modify arbitrary content of books without permission.

Affected

ProductAffectedFixed inSource
Tad Book3≤ 3.89–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
twcert (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

reftwcert.org.tw/tw/cp-132-5173-e21ba-1.html