VYPR
← All advisories
High severity8.1NVD Advisory· Published Oct 11, 2021· Updated Jun 17, 2026

CVE-2021-40884

CVE-2021-40884

Description

Projectsend version r1295 is affected by sensitive information disclosure. Because of not checking authorization in ids parameter in files-edit.php and id parameter in process.php function, a user with uploader role can download and edit all files of users in application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Projectsend/Projectsendllm-fuzzy2 versions
    =r1295+ 1 more
    • (no CPE)range: =r1295
    • cpe:2.3:a:projectsend:projectsend:r1295:*:*:*:*:*:*:*
  • Projectsend/Projectsenddescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.