CVE-2021-26247

Publication date

2022-01-19 20:38:53

Family

redhat

State

PUBLISHED

Description

As an unauthenticated remote user, visit "http:///auth_changepassword.php?ref=" to successfully execute the JavaScript payload present in the "ref" URL parameter.