CVE-2021-22957
EUVD-2021-1008324.11.2021, 19:15
A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has convinced a privileged user to access a URL with malicious code to take over said user’s account.This vulnerability is fixed in UniFi Protect application Version 1.20.0 and later.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ui | unifi_protect | 𝑥 < 1.20.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration