Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
CVE-2021-27885
See a problem?
Please try reporting it
to the source
first.
Source
https://cve.org/CVERecord?id=CVE-2021-27885
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-27885.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-27885
Published
2021-03-02T19:15:13Z
Modified
2026-05-17T03:54:25Z
Severity
8.8 (High)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Calculator
Summary
[none]
Details
usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism.
References
http://packetstormsecurity.com/files/161651/e107-CMS-2.3.0-Cross-Site-Request-Forgery.html
https://github.com/e107inc/e107/releases
https://github.com/e107inc/e107/commit/d9efdb9b5f424b4996c276e754a380a5e251f472
Affected packages
CVE-2021-27885 - OSV