CVE-2021-41176
1 advisory.
Packagist/pterodactyl/panel CVE-2021-41176: unknown 0, EPSS 0.52%
pterodactyl/panel CSRF allowing an external page to trigger a user logout event
Action: Upgrade pterodactyl/panel to 1.6.3 or later.
composer require pterodactyl/panel:1.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.6.3 | - |
Fixed versions
| 1.6.3 |
Sources
- osv: GHSA-m49f-hcxp-6hm6
- https://github.com/pterodactyl/panel/security/advisories/GHSA-m49f-hcxp-6hm6
- https://nvd.nist.gov/vuln/detail/CVE-2021-41176
- https://github.com/pterodactyl/panel/commit/45999ba4ee1b2dcb12b4a2fa2cedfb6b5d66fac2
- https://github.com/pterodactyl/panel
- https://github.com/pterodactyl/panel/releases/tag/v1.6.3
CVE-2021-41176 · published · modified · JSON