CVE-2021-45786

magicblack/maccms10

on github

Published

March 16, 2022

Severity

CVSS v3:

9.8 CRITICAL

CVSS v2:

7.5 HIGH

Description

In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges.

References

https://github.com/magicblack/maccms10/issues/747

Configurations

CPE23	Version Start	Version End	Exact Version
cpe:2.3:a:maccms:maccms:10.0:::::::*	n/a	n/a	10.0

External Links

NVD - CVE-2021-45786