Unrated severityNVD Advisory· Published Oct 11, 2021· Updated Aug 4, 2024
CVE-2021-40884
CVE-2021-40884
Description
Projectsend version r1295 is affected by sensitive information disclosure. Because of not checking authorization in ids parameter in files-edit.php and id parameter in process.php function, a user with uploader role can download and edit all files of users in application.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Projectsend/Projectsenddescription
- Range: = r1295
Patches
Vulnerability mechanics
References
1- github.com/projectsend/projectsend/issues/992mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.