CVE-2021-29995

A Cross Site Request Forgery (CSRF) issue in Server Console in CloverDX through 5.9.0 allows remote attackers to execute any action as the logged-in user (including script execution). The issue is resolved in CloverDX 5.10, CloverDX 5.9.1, CloverDX 5.8.2, and CloverDX 5.7.1.

• CWE-352

• http://packetstormsecurity.com/files/163697/CloverDX-5.9.0-Code-Execution-Cross-Site-Request-Forgery.htmlExploit, Third Party Advisory, VDB Entry
• https://support.cloverdx.com/releases/Release Notes, Vendor Advisory
• https://support1.cloverdx.com/hc/en-us/articles/360021006520Vendor Advisory
• http://packetstormsecurity.com/files/163697/CloverDX-5.9.0-Code-Execution-Cross-Site-Request-Forgery.htmlExploit, Third Party Advisory, VDB Entry
• https://support.cloverdx.com/releases/Release Notes, Vendor Advisory
• https://support1.cloverdx.com/hc/en-us/articles/360021006520Vendor Advisory

Published

Jun 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-29988Firefox incorrectly treated an inline list-item element as a…8.8
• CVE-2021-29989Mozilla developers reported memory safety bugs present in Fi…8.8
• CVE-2021-29990Mozilla developers and community members reported memory saf…8.8
• CVE-2021-29991Firefox incorrectly accepted a newline in a HTTP/3 header, i…8.1
• CVE-2021-29993Firefox for Android allowed navigations through the `intent:…8.1
• CVE-2021-29994Cloudera Hue 4.6.0 allows XSS.6.1
• CVE-2021-29996Mark Text through 0.16.3 allows attackers arbitrary command …9.6
• CVE-2021-29997An issue was discovered in Wind River VxWorks 7 before 21.03…5.3
• CVE-2021-29998An issue was discovered in Wind River VxWorks before 6.5. Th…9.8
• CVE-2021-29999An issue was discovered in Wind River VxWorks through 6.8. T…9.8
• CVE-2021-30000An issue was discovered in LATRIX 0.6.0. SQL injection in th…9.8
• CVE-2021-30002An issue was discovered in the Linux kernel before 5.11.3 wh…6.2