CVE-2021-45914

Description

In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request. This allows the attacker's session to be authenticated as any registered LuxCal user, including the site administrator.

Weakness classification

• nvd@nist.gov: NVD-CWE-noinfo

Primary references

• cve@mitre.org — Not Applicable
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Product, Release Notes, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Not Applicable
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Product, Release Notes, Vendor Advisory