CVE-2021-41826
MEDIUM NUCLEIPlaceOS Authentication Service < 1.29.10.0 - Open Redirect via Sessions Controller
Title source: llmExploitation Summary
CVE-2021-41826 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.
Description
PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessions_controller.rb open redirect.
Nuclei Templates (1)
PlaceOS 1.2109.1 - Open Redirection
MEDIUMby geeknik
References (2)
Core 2
Core References
Exploit, Patch, Third Party Advisory x_refsource_misc
https://github.com/PlaceOS/auth/issues/36
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/164345/PlaceOS-1.2109.1-Open-Redirection.html
Scores
CVSS v3
6.1
EPSS
0.1187
EPSS Percentile
95.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-601
Status
published
Products (1)
place/placeos_authentication
< 1.29.10.0
Published
Sep 30, 2021
Tracked Since
Feb 18, 2026