VULNERABILITY INTELLIGENCE

CVE-2021-42338

CVSS score9.8 CRITICAL
EPSS probability5.81%
CISA KEVNot currently listed
Published2021-11-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files.

Weakness classification

  • twcert@cert.org.tw: CWE-285
  • nvd@nist.gov: CWE-287

Primary references