CVE-2021-44836

An issue was discovered in Delta RM 1.2. The /risque/risque/workflow/reset endpoint is lacking access controls, and it is possible for an unprivileged user to reopen a risk with a POST request, using the risqueID parameter to identify the risk to be re-opened.

• CWE-639

• https://gist.github.com/rntcruz23/01af412813c63d6e0cc41c26f52893beExploit, Third Party Advisory
• https://www.deltarm.comProduct, Vendor Advisory
• https://gist.github.com/rntcruz23/01af412813c63d6e0cc41c26f52893beExploit, Third Party Advisory
• https://www.deltarm.comProduct, Vendor Advisory

Published

Jan 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44827There is remote authenticated OS command injection on TP-Lin…8.8
• CVE-2021-44828Arm Mali GPU Kernel Driver (Midgard r26p0 through r30p0, Bif…7.8
• CVE-2021-44829Cross Site Scripting (XSS) vulnerability exists in index.htm…6.1
• CVE-2021-44832Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding s…6.6
• CVE-2021-44833The CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions…9.8
• CVE-2021-44835An issue was discovered in Active Intelligent Visualization …9.8
• CVE-2021-44837An issue was discovered in Delta RM 1.2. It is possible for …4.3
• CVE-2021-44838An issue was discovered in Delta RM 1.2. Using the /risque/r…4.3
• CVE-2021-44839An issue was discovered in Delta RM 1.2. It is possible to r…6.5
• CVE-2021-44840An issue was discovered in Delta RM 1.2. Using an privileged…2.7
• CVE-2021-44847A stack-based buffer overflow in handle_request function in …9.8
• CVE-2021-44848In Cibele Thinfinity VirtualUI before 3.0, /changePassword r…5.3