CVE-2021-39409

A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be authenticated.

CVSS v3 9.8 CRITICAL
CVSS v2.0 7.5 HIGH

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://github.com/StefanDorresteijn/CVE-2021-39409	Exploit Third Party Advisory
https://github.com/StefanDorresteijn/CVE-2021-39409	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:online_student_rate_system_project:online_student_rate_system:1.0:*:*:*:*:*:*:*

History

21 Nov 2024, 06:19

Type	Values Removed	Values Added
References	~~() https://github.com/StefanDorresteijn/CVE-2021-39409 - Exploit, Third Party Advisory~~	() https://github.com/StefanDorresteijn/CVE-2021-39409 - Exploit, Third Party Advisory

08 Aug 2023, 14:22

Type	Values Removed	Values Added
CWE	~~CWE-732~~	NVD-CWE-Other

Information

Published : 2022-06-24 17:15

Updated : 2024-11-21 06:19

NVD link : CVE-2021-39409

Mitre link : CVE-2021-39409

CVE.ORG link : CVE-2021-39409

JSON object : View

Products Affected

online_student_rate_system_project

online_student_rate_system

CWE

NVD-CWE-Other

{"id": "CVE-2021-39409", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2022-06-24T17:15:08.377", "references": [{"url": "https://github.com/StefanDorresteijn/CVE-2021-39409", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/StefanDorresteijn/CVE-2021-39409", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be authenticated."}, {"lang": "es", "value": "Se presenta una vulnerabilidad en Online Student Rate System versi\u00f3n v1.0, que permite a cualquier usuario registrarse como administrador sin necesidad de autenticarse"}], "lastModified": "2024-11-21T06:19:29.347", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:online_student_rate_system_project:online_student_rate_system:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2140A653-1C70-4655-8696-45CF7F624109"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}