CVE-2021-26215

MediumCVSS 4.3

Published: 18/03/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.49%

39th percentile - higher than 39% of all known CVEs

Summary

SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditDocument.php. An attacker can exploit this vulnerability to perform unauthorized actions on behalf of a victim.

Risk Assessment

The risk involves unauthorized modification of documents, potentially leading to data integrity and authorization breaches in the document management system.

Recommendation

Immediately update SeedDMS to the latest version that fixes this vulnerability. Additionally, implement CSRF protection mechanisms such as anti-CSRF tokens.

Original NVD description (English source)

SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditDocument.php.