CVE-2021-4258

A vulnerability was found in whohas. It has been rated as problematic. This issue affects some unknown processing of the component Package Information Handler. The manipulation leads to cleartext transmission of sensitive information. The attack may be initiated remotely. The real existence of this vulnerability is still doubted at the moment. The name of the patch is 667c3e2e9178f15c23d7918b5db25cd0792c8472. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216251. NOTE: Most sources redirect to the encrypted site which limits the possibilities of an attack.

• CWE-310
• CWE-319

• https://github.com/whohas/whohas/commit/667c3e2e9178f15c23d7918b5db25cd0792c8472Patch, Third Party Advisory
• https://vuldb.com/?id.216251Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/whohas/whohas/commit/667c3e2e9178f15c23d7918b5db25cd0792c8472Patch, Third Party Advisory
• https://vuldb.com/?id.216251Permissions Required, Third Party Advisory, VDB Entry

Published

Dec 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-42568Sonatype Nexus Repository Manager 3.x through 3.35.0 allows …4.3
• CVE-2021-4257A vulnerability was found in ctrlo lenio. It has been declar…6.1
• CVE-2021-42574An issue was discovered in the Bidirectional Algorithm in th…8.3
• CVE-2021-42575The OWASP Java HTML Sanitizer before 20211018.1 does not pro…9.8
• CVE-2021-42576The bluemonday sanitizer before 1.0.16 for Go, and before 0.…9.8
• CVE-2021-42577An issue was discovered in Softing OPC UA C++ SDK before 5.7…7.5
• CVE-2021-42580Sourcecodester Online Learning System 2.0 is vunlerable to s…9.8
• CVE-2021-42581Prototype poisoning in function mapObjIndexed in Ramda 0.27.…9.1
• CVE-2021-42583A Broken or Risky Cryptographic Algorithm exists in Max Mazu…7.5
• CVE-2021-42584A Stored Cross Site Scripting (XSS) issue exists in Convos-C…5.4
• CVE-2021-42585A heap buffer overflow was discovered in copy_compressed_byt…8.8
• CVE-2021-42586A heap buffer overflow was discovered in copy_bytes in decod…8.8