« Volver al listado

CVE-2021-25980

Estado: ModificadaAlta (8.8)—

In Talkyard, versions v0.04.01 through v0.6.74-WIP-63220cb, v0.2020.22-WIP-b2e97fe0e through v0.2021.02-WIP-879ef3fe1 and tyse-v0.2021.02-879ef3fe1-regular through tyse-v0.2021.28-af66b6905-regular, are vulnerable to Host Header Injection. By luring a victim application-user to click on a link, an unauthenticated attacker can use the “forgot password” functionality to reset the victim’s password and successfully take over their account.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Talkyard — Talkyard

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-25980",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2021-25980",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-04-30T15:29:27.390742Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "vulnerabilitylab@mend.io",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "vulnerabilitylab@mend.io",
      "affectedData": [
        {
          "vendor": "debiki",
          "product": "talkyard",
          "versions": [
            {
              "status": "affected",
              "version": "v0.04.01",
              "lessThan": "v0*",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "v0.2020.22-WIP-b2e97fe0e",
              "lessThan": "v0.2020*",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "v0.2021",
              "versionType": "custom",
              "lessThanOrEqual": "v0.2021.02-WIP-879ef3fe1"
            },
            {
              "status": "affected",
              "version": "tyse-v0.2021.02-879ef3fe1-regular",
              "lessThan": "tyse-v0.2021*",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-11-11T07:15:11.380",
  "references": [
    {
      "url": "https://github.com/debiki/talkyard/commit/4067e191a909ed06f250d09a40e43aa5edbb0289",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "source": "vulnerabilitylab@mend.io"
    },
    {
      "url": "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25980",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "vulnerabilitylab@mend.io"
    },
    {
      "url": "https://github.com/debiki/talkyard/commit/4067e191a909ed06f250d09a40e43aa5edbb0289",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25980",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "vulnerabilitylab@mend.io",
      "description": [
        {
          "lang": "en",
          "value": "CWE-74"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-74"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Talkyard, versions v0.04.01 through v0.6.74-WIP-63220cb, v0.2020.22-WIP-b2e97fe0e through v0.2021.02-WIP-879ef3fe1 and tyse-v0.2021.02-879ef3fe1-regular through tyse-v0.2021.28-af66b6905-regular, are vulnerable to Host Header Injection. By luring a victim application-user to click on a link, an unauthenticated attacker can use the “forgot password” functionality to reset the victim’s password and successfully take over their account."
    },
    {
      "lang": "es",
      "value": "En Talkyard, las versiones v0.04.01 hasta v0.6.74-WIP-63220cb, versiones v0.2020.22-WIP-b2e97fe0e hasta v0.2021.02-WIP-879ef3fe1 y versiones tyse-v0.2021.02-879ef3fe1-regular hasta tyse-v0.2021.28-af66b6905-regular, son vulnerables a una inyección de encabezados de host. Atrayendo a un usuario de la aplicación víctima para que haga clic en un enlace, un atacante no autenticado puede usar la funcionalidad \"forgot password\" para restablecer la contraseña de la víctima y hacerse con su cuenta"
    }
  ],
  "lastModified": "2026-06-17T03:42:43.340",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:talkyard:talkyard:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C3AD90CD-FF57-4CA1-85B3-3EADB9159EB3",
              "versionEndIncluding": "0.6.74-wip-63220cb",
              "versionStartIncluding": "0.04.01"
            },
            {
              "criteria": "cpe:2.3:a:talkyard:talkyard:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74C594EE-CC21-4F19-9E76-AB4A2A5B8ACA",
              "versionEndIncluding": "0.2021.02-wip-879ef3fe1",
              "versionStartIncluding": "0.2020.22-wip-b2e97fe0e"
            },
            {
              "criteria": "cpe:2.3:a:talkyard:talkyard:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AE16449B-47FA-4F64-868C-056B170CAB0D",
              "versionEndIncluding": "tyse-v0.2021.28-af66b6905-regular",
              "versionStartIncluding": "tyse-v0.2021.02-879ef3fe1-regular"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "vulnerabilitylab@mend.io"
}