CVE-2021-21751 Open redirect in ZXIN10 CMS
High-privilege attackers can tamper with URLs in the ZTE BigVideo analysis product due to inconsistent validation, causing service exceptions.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-21751?
CVE-2021-21751 is a high-severity vulnerability in ZXIN10 CMS, published on 27 Dec 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
ZTE BigVideo analysis product has an input verification vulnerability. Due to the inconsistency between the front and back verifications when configuring the large screen page, an attacker with high privileges could exploit this vulnerability to tamper with the URL and cause service exception.
Which versions are affected by CVE-2021-21751?
It affects 1 product.
Products include Zte Zxin10 Cms.
How do I fix CVE-2021-21751?
No fix has been published for CVE-2021-21751 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-21751 being exploited?
There is no known exploitation of CVE-2021-21751 in the wild and no public exploit code.
Other vulnerabilities in ZXIN10 CMS
Sources
Also known as GHSA-j27v-qfg5-c437.