e107 Inadequate Encryption Strength Vulnerability - CVE-2021-27885 - Vulnerability Database

e107 Inadequate Encryption Strength Vulnerability - CVE-2021-27885

High

Reference: CVE-2021-27885

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-27885

Title: e107 Inadequate Encryption Strength Vulnerability

Overview:

usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism.