QwikSec

Security Database

CVE

CWE

Training

CVE-2021-22957

Published: Nov 24, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has convinced a privileged user to access a URL with malicious code to take over said user’s account.This vulnerability is fixed in UniFi Protect application Version 1.20.0 and later.

Vendor	Product	Versions
n/a	UniFi Protect application	affected `Fixed in 1.20.0`

Weaknesses (CWE)

References

https://community.ui.com/releases/Security-Advisory-Bulletin-021-021/62bd8841-6603-4fee-9dba-73037148f173

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.