MEDIUM🇵🇱 Wersja polska

CVE-2021-25991

CVSS 5.7v3.1pub. 2021-12-29upd. 2024-11-21

In Ifme, versions v5.0.0 to v7.32 are vulnerable against an improper access control, which makes it possible for admins to ban themselves leading to their deactivation from Ifme account and complete loss of admin access to Ifme.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

  • If Me Ifme

    APP
    If-Me
    5.0.0 – 7.32
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-25992CRITICAL9.8PL ✓same product

If-Me Ifme: brak unieważnienia sesji po wylogowaniu użytkownika

CVE-2021-25988MEDIUM5.4same product

In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability (notifications section) w...

CVE-2021-25989MEDIUM5.4same product

In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability in the markdown editor. I...

CVE-2021-25990MEDIUM5.4same product

In “ifme”, versions v7.22.0 to v7.31.4 are vulnerable against self-stored XSS in the contacts field as it allo...