VULNERABILITY INTELLIGENCE

CVE-2021-41976

CVSS score5.3 MEDIUM
EPSS probability1.03%
CISA KEVNot currently listed
Published2021-10-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

Tad Uploader edit book list function is vulnerable to authorization bypass, thus remote attackers can use the function to amend the folder names in the book list without logging in.

Weakness classification

  • twcert@cert.org.tw: CWE-285
  • nvd@nist.gov: CWE-306

Primary references