CVE-2021-4268

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in phpRedisAdmin up to 1.17.3. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 1.18.0 is able to address this issue. The name of the patch is b9039adbb264c81333328faa9575ecf8e0d2be94. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216471.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863 CWE-352

Affected software

Vendor	Product	Versions
unspecified	phpRedisAdmin	1.14.0; 1.14.1; 1.15.0; 1.16.0; 1.16.1; 1.16.2; 1.17.0; 1.17.1; 1.17.2; 1.17.3

References

https://github.com/erikdubbelboer/phpRedisAdmin/commit/b9039adbb264c81333328faa9575ecf8e0d2be94Patch, Third Party Advisory
https://github.com/erikdubbelboer/phpRedisAdmin/releases/tag/v1.18.0Release Notes, Third Party Advisory
https://vuldb.com/?id.216471Permissions Required, Third Party Advisory, VDB Entry
https://github.com/erikdubbelboer/phpRedisAdmin/commit/b9039adbb264c81333328faa9575ecf8e0d2be94Patch, Third Party Advisory
https://github.com/erikdubbelboer/phpRedisAdmin/releases/tag/v1.18.0Release Notes, Third Party Advisory
https://vuldb.com/?id.216471Permissions Required, Third Party Advisory, VDB Entry

Timeline

Published: Dec 21, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-426818.8A Buffer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105. The IOCTL Handler 0x22001B allows local attackers to CVE-2021-426828.8An Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 .The IOCTL Handler 0x22001B allows local attackers CVE-2021-426838.8A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B allows local attack CVE-2021-426858.8An Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 . The IOCTL Handler 0x22005B in the Accops HyWorks CVE-2021-426868.8An Integer Overflow exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B in the Accops HyWorks Windows C CVE-2021-426878.8A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22005B allows local attack CVE-2021-426888.8An Integer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22005B in the Accops HyW CVE-2021-42696.1A vulnerability has been found in SimpleRisk and classified as problematic. This vulnerability affects the function checkAndSetValidation of CVE-2021-426926.5There is a stack-overflow vulnerability in tinytoml v0.4 that can cause a crash or DoS.CVE-2021-426948.3An issue was discovered in the character definitions of the Unicode Specification through 14.0. The specification allows an adversary to pro CVE-2021-426977.5Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote at CVE-2021-426987.8Project files are stored memory objects in the form of binary serialized data that can later be read and deserialized again to instantiate t