CVE-2021-47157

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The Kossy module before 0.60 for Perl allows JSON hijacking because of X-Requested-With mishandling.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-346

Affected software

No affected versions have been published.

Timeline

Published
Mar 18, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2021

CVE-2021-471585.5In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: add error handling in sja1105_setup() If any of sjaCVE-2021-471595.5In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix a crash if ->get_sset_count() fails If ds->ops->get_ssetCVE-2021-471607.1In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: fix VLAN traffic leaks PCR_MATRIX field was set to aCVE-2021-471615.5In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix a resource leak in an error handling path 'dspiCVE-2021-471625.5In the Linux kernel, the following vulnerability has been resolved: tipc: skb_linearize the head skb when reassembling msgs It's not a gooCVE-2021-471635.5In the Linux kernel, the following vulnerability has been resolved: tipc: wait and exit until all work queues are done On some host, a craCVE-2021-471645.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix null deref accessing lag dev It could be the lag dev isCVE-2021-471655.5In the Linux kernel, the following vulnerability has been resolved: drm/meson: fix shutdown crash when component not probed When main compCVE-2021-471665.5In the Linux kernel, the following vulnerability has been resolved: NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()CVE-2021-471675.5In the Linux kernel, the following vulnerability has been resolved: NFS: Fix an Oopsable condition in __nfs_pageio_add_request() Ensure thCVE-2021-471685.5In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect limit in filelayout_decode_layout() The "sizeof(CVE-2021-471695.5In the Linux kernel, the following vulnerability has been resolved: serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait
CVE-2021-47157: Critical severity, CVSS 9.8 | Vulnix