CVE-2021-3113

7.5 highEPSS 3.2%

High (7.5) in netsia seba\+. EPSS 3.2% chance of exploitation in the next 30 days.

Netsia SEBA+ through 0.16.1 build 70-e669dcd7 allows remote attackers to discover session cookies via a direct /session/list/allActiveSession request. For example, the attacker can discover the admin's cookie if the admin account happens to be logged in when the allActiveSession request occurs, and can then use that cookie immediately for admin access,

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-425
Published: 2021-01-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netsia:seba\+

References

https://www.exploit-db.com/exploits/49435
https://www.netsia.com/#netsiaseba
https://www.pentest.com.tr/exploits/Netsia-SEBA-0-16-1-Authentication-Bypass-Add-Root-User-Metasploit.html
https://www.exploit-db.com/exploits/49435
https://www.netsia.com/#netsiaseba

Check your stack JSON