CVE-2021-3980

elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

• CWE-359

• https://github.com/elgg/elgg/commit/572d210e2392f1fdf47ff2f38665372a6535c126Patch, Third Party Advisory
• https://huntr.dev/bounties/1f43f11e-4bd8-451f-a244-dc9541cdc0acExploit, Third Party Advisory
• https://github.com/elgg/elgg/commit/572d210e2392f1fdf47ff2f38665372a6535c126Patch, Third Party Advisory
• https://huntr.dev/bounties/1f43f11e-4bd8-451f-a244-dc9541cdc0acExploit, Third Party Advisory

Published

Dec 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39794In broadcastPortInfo of AdbService.java, there is a possible…7.8
• CVE-2021-39795Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-39796In HarmfulAppWarningActivity of HarmfulAppWarningActivity.ja…7.3
• CVE-2021-39797In several functions of of LauncherApps.java, there is a pos…7.8
• CVE-2021-39798In Bitmap_createFromParcel of Bitmap.cpp, there is a possibl…7.8
• CVE-2021-39799In AttributionSource of AttributionSource.java, there is a p…7.8
• CVE-2021-39800In ion_ioctl of ion-ioctl.c, there is a possible way to leak…5.5
• CVE-2021-39801In ion_ioctl of ion-ioctl.c, there is a possible use after f…7.8
• CVE-2021-39802In change_pte_range of mprotect.c , there is a possible way …7.8
• CVE-2021-39803In ~Impl of C2AllocatorIon.cpp, there is a possible out of b…6.5
• CVE-2021-39804In reinit of HeifDecoderImpl.cpp, there is a possible crash …6.5
• CVE-2021-39805In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible…6.5