PHP-Fusion Incorrect Permission Assignment for Critical Resource Vulnerability - CVE-2021-3172 - Vulnerability Database

PHP-Fusion Incorrect Permission Assignment for Critical Resource Vulnerability - CVE-2021-3172

High

Reference: CVE-2021-3172

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-3172

Title: PHP-Fusion Incorrect Permission Assignment for Critical Resource Vulnerability

Overview:

An issue in Php-Fusion v9.03.90 fixed in v9.10.00 allows authenticated attackers to cause a Distributed Denial of Service via the Polling feature.