CVE-2021-21937

Summary:

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘host_alt_filter’ parameter. This can be done as any authenticated user or through cross-site request forgery.

Reference Links(if available):

https://talosintelligence.com/vulnerability_reports/TALOS-2021-1366

CVSS Score (if available)

v2: / MEDIUM

v3: /

Links to Exploits(if available)