CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NCVE-2021-41976
Medium (5.3) in tad uploader project tad uploader. EPSS 1.0% chance of exploitation in the next 30 days.
Tad Uploader edit book list function is vulnerable to authorization bypass, thus remote attackers can use the function to amend the folder names in the book list without logging in.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-306, CWE-285
- Published
- Modified
- Record from
- the NVD, synced
Affected
- tad_uploader_project:tad_uploader