CVE-2021-32541

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows remote unauthenticated attackers can send a large number of valid usernames, and force those logged-in account to log out, causing the user to be unable to access the services

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published: May 28, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-325426.1The parameters of the specific functions in the CTS Web trading system do not filter special characters, which allows unauthenticated attack CVE-2021-325435.4The CTS Web transaction system related to authentication management is implemented incorrectly. After login, remote attackers can manipulate CVE-2021-325445.4Special characters of IGT search function in igt+ are not filtered in specific fields, which allow remote authenticated attackers can inject CVE-2021-325457.5Pexip Infinity before 26 allows remote denial of service because of missing RTMP input validation.CVE-2021-325468.8Missing input validation in internal/db/repo_editor.go in Gogs before 0.12.8 allows an attacker to execute code remotely. An unprivileged at CVE-2021-325475.5It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openj CVE-2021-325485.5It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openj CVE-2021-325495.5It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openj CVE-2021-325505.5It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openj CVE-2021-325515.5It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openj CVE-2021-325525.5It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openj CVE-2021-325535.5It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openj