CVE-2021-45915 | BDVDB-2026-176702 Detail

Description#

In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value. This allows the attacker's session to be authenticated as any registered LuxCal user, including the site administrator.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/h1pmnh
https://twitter.com/h1pmnh
https://www.luxsoft.eu/index.php?pge=dload
https://h1pmnh.github.io/post/cve-luxcal-2021/

Exploit#

No public exploit known

History#

Version 12022-05-24Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.