Sign in

Not rated

CVE-2021-20102 Machform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF tokens in place

Description

Machform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF tokens in place.

Affected products and versions

Product	Affected versions	Fixed in
AppNitro Machform	Versions not published

The 5 CVEs of AppNitro Machform →

CVE-2021-20105 Machform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an improperly sanitized 'ref'… Not rated CVE-2021-20104 Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization… Not rated CVE-2021-20103 Machform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient sanitization of file… Not rated CVE-2021-20101 Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers Not rated

Do you use AppNitro Machform?

Track this CVE Watch AppNitro Machform Check my SBOMs

www.cveye.io/en/cve/CVE-2021-20102

Timeline

Published June 29, 2021
Last modified August 3, 2024

References

www.tenable.com www.tenable.com

Track this CVE