by Kastro
Paper/Archive/CVE-2021-41975

CVE-2021-41975

Tad TadTools — Tad TadTools - Improper Authorization

EPSS 1%CVSS 9.1
critical.is priorityof 100
42
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 71.3.713 × 2014.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files in the system without logging in.

Affected

ProductAffectedFixed inSource
TadTools≤ 3.2.1–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
twcert (CNA)7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

reftwcert.org.tw/tw/cp-132-5174-6f1d5-1.html