CVE-2021-41975 HIGH

CVE-2021-41975: Tad TadTools - Improper Authorization

Vendor Tad
Product TadTools
Weakness CWE-285
Published October 8, 2021
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files in the system without logging in.

Key dates

02Disclosure timeline

October 8, 2021 CVE published
September 16, 2024 Record updated