CVE-2021-4258

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in whohas. It has been rated as problematic. This issue affects some unknown processing of the component Package Information Handler. The manipulation leads to cleartext transmission of sensitive information. The attack may be initiated remotely. The real existence of this vulnerability is still doubted at the moment. The name of the patch is 667c3e2e9178f15c23d7918b5db25cd0792c8472. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216251. NOTE: Most sources redirect to the encrypted site which limits the possibilities of an attack.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-310 CWE-319

Affected software

Vendor	Product	Versions
unspecified	whohas	n/a

References

https://github.com/whohas/whohas/commit/667c3e2e9178f15c23d7918b5db25cd0792c8472Patch, Third Party Advisory
https://vuldb.com/?id.216251Permissions Required, Third Party Advisory, VDB Entry
https://github.com/whohas/whohas/commit/667c3e2e9178f15c23d7918b5db25cd0792c8472Patch, Third Party Advisory
https://vuldb.com/?id.216251Permissions Required, Third Party Advisory, VDB Entry

Timeline

Published: Dec 19, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-425809.8Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file (/admin/login.php) and au CVE-2021-425819.1Prototype poisoning in function mapObjIndexed in Ramda 0.27.0 and earlier allows attackers to compromise integrity or availability of applic CVE-2021-425837.5A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that may result in the expo CVE-2021-425845.4A Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32.CVE-2021-425858.8A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.CVE-2021-425868.8A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.CVE-2021-42599.8A vulnerability was found in phpRedisAdmin up to 1.16.1. It has been classified as problematic. This affects the function authHttpDigest of CVE-2021-425975.4A Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Storage Unit Rental Management System PHP 8.0.10 , Apache 2.4.14, SURMS CVE-2021-42606.1A vulnerability was found in oils-js. It has been declared as critical. This vulnerability affects unknown code of the file core/Web.js. The CVE-2021-42619.8A vulnerability classified as critical has been found in pacman-canvas up to 1.0.5. Affected is the function addHighscore of the file data/d CVE-2021-426127.8A use after free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have other unspecif CVE-2021-426137.8A double free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a denial of service or possibly have other unspecified