CVE-2021-41764

A cross-site request forgery (CSRF) vulnerability exists in Streama up to and including v1.10.3

published September 29, 2021

CVSS
—
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

A cross-site request forgery (CSRF) vulnerability exists in Streama up to and including v1.10.3. The application does not have CSRF checks in place when performing actions such as uploading local files. As a result, attackers could make a logged-in administrator upload arbitrary local files via a CSRF attack and send them to the attacker.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00710 · 53.0th percentile
Published
2021-09-29T19:02Z
EPSS history
Timeline
  • 29 SEP 19:02Z
    A cross-site request forgery (CSRF) vulnerability exists in Streama up to and including v1.10.3
    cvelistv5