CVE-2021-36444

HIGH

imcat 5.4 - Cross-Site Request Forgery via Add Administrator Page

Title source: llm

Description

Cross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page.

References (1)

Core 1

Core References

Exploit, Issue Tracking, Third Party Advisory

https://github.com/peacexie/imcat/issues/9

Scores

CVSS v3 8.8

EPSS 0.0061

EPSS Percentile 45.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-352

Status published

Products (1)

txjia/imcat 5.4

Published Feb 03, 2023

Tracked Since Feb 18, 2026