VULNERABILITY INTELLIGENCE

CVE-2021-36444

CVSS score8.8 HIGH

EPSS probability0.61%

CISA KEVNot currently listed

Published2023-02-03

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Cross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page.

Weakness classification

nvd@nist.gov: CWE-352
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-352

Primary references

cve@mitre.org — Exploit, Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory