Critical severity9.8NVD Advisory· Published Feb 10, 2022· Updated Jun 17, 2026

CVE-2021-25992

Description

In Ifme, versions 1.0.0 to v.7.33.2 don’t properly invalidate a user’s session even after the user initiated logout. It makes it possible for an attacker to reuse the admin cookies either via local/network access or by other hypothetical attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

If Me/Ifme
cpe:2.3:a:if-me:ifme:*:*:*:*:*:*:*:*
Range: >=1.0.0,<=7.33.2
Ifmeorg/ifmellm-create2 versions
1.0.0 to 7.33.2+ 1 more
- (no CPE)range: 1.0.0 to 7.33.2
- (no CPE)range: 1.0.0

Patches

Vulnerability mechanics

References

github.com/ifmeorg/ifme/commit/014f6d3526a594109d4d6607c2f30b1865e37611nvdPatchThird Party Advisory
www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25992nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000