Sign in

Not rated

CVE-2021-20105 Machform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an improperly sanitized 'ref'…

Description

Machform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an improperly sanitized 'ref' parameter.

Affected products and versions

Product	Affected versions	Fixed in
AppNitro Machform	Versions not published

The 5 CVEs of AppNitro Machform →

CVE-2021-20104 Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization… Not rated CVE-2021-20103 Machform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient sanitization of file… Not rated CVE-2021-20102 Machform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF tokens in place Not rated CVE-2021-20101 Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers Not rated

Do you use AppNitro Machform?

Track this CVE Watch AppNitro Machform Check my SBOMs

www.cveye.io/en/cve/CVE-2021-20105

Timeline

Published June 29, 2021
Last modified August 3, 2024

References

www.tenable.com www.tenable.com

Track this CVE