PT-2026-1117 · Emlog · Emlog

CVE-2026-21430

·

Publicado

2026-01-02

·

Atualizado

2026-01-02

CVSS v3.1

9.3

Crítica

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Emlog version 2.5.23
Description Emlog version 2.5.23’s article creation functionality is susceptible to cross-site request forgery (CSRF). This allows an attacker to force a user to post an article containing arbitrary content. When combined with stored cross-site scripting, this can result in account takeover.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-352CWE-79

Identificadores relacionados

CVE-2026-21430
GHSA-2G2W-VMG7-PQ4Q

Produtos afetados

Emlog