CVE-2021-3376

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privileges via a crafted POST request using the user_group_id_field parameter.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Dec 14, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-337605.5Media Foundation Information Disclosure VulnerabilityCVE-2021-337617.8Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVE-2021-337627.0Azure CycleCloud Elevation of Privilege VulnerabilityCVE-2021-337635.5Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2021-337645.9Windows Key Distribution Center Information Disclosure VulnerabilityCVE-2021-337656.2Windows Installer Spoofing VulnerabilityCVE-2021-337667.3Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2021-337678.2Open Enclave SDK Elevation of Privilege VulnerabilityCVE-2021-337688.0Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2021-33776.1The npm package ansi_up converts ANSI escape codes into HTML. In ansi_up v4, ANSI escape codes can be used to create HTML hyperlinks. Due toCVE-2021-337717.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2021-337727.5Windows TCP/IP Driver Denial of Service Vulnerability
CVE-2021-3376: High severity, CVSS 8.8 | Vulnix