VYPR

Arunna

by Arunna

CVEs (1)

  • CVE-2021-47754Jan 15, 2026
    risk 0.00cvss epss 0.00

    Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users into submitting the form.