CVE-2021-21376

Katalog CVE

CVSS 6.5 · Medium EPSS 1,5%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada openmicroscopy omero.web. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information about the current user such as their id, name and the groups they are in, and these are available on the main webclient pages. This represents an information exposure vulnerability. Some additional information being loaded is not used by the webclient and is being removed in this release. This is fixed in version 5.9.0.

Rincian

Terbit di NVD

23 Maret 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 72,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.openmicroscopy.org/security/advisories/2021-SV1/ advisory vendor
• https://github.com/ome/omero-web/commit/952f8e5d28532fbb14fb665982211329d137908c patch · advisory pihak ketiga
• https://github.com/ome/omero-web/blob/master/CHANGELOG.md#590-march-2021 release notes · advisory pihak ketiga
• https://github.com/ome/omero-web/security/advisories/GHSA-gfp2-w5jm-955q advisory pihak ketiga
• https://pypi.org/project/omero-web/ release notes · advisory pihak ketiga