CVE-2021-3818 MEDIUM

CVE-2021-3818: Reliance on Cookies without Validation and Integrity Checking in getgrav/grav

Vendor Getgrav

Product getgrav/grav

Weakness CWE-565 · Reliance on cookies

Published September 27, 2021

Last update August 3, 2024

CVSS base score

6.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

grav is vulnerable to Reliance on Cookies without Validation and Integrity Checking

Key dates

September 27, 2021 CVE published

August 3, 2024 Record updated

External resources

Related vulnerabilities