CVE-2021-26216

MediumCVSS 4.3

Published: 18/03/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.49%

39th percentile - higher than 39% of all known CVEs

Summary

SeedDMS 5.1.x is affected by a cross-site request forgery (CSRF) vulnerability in out.EditFolder.php. An attacker can exploit this flaw to perform unauthorized actions on behalf of an authenticated user.

Risk Assessment

The risk involves potential unauthorized modification or deletion of folders in SeedDMS, leading to data integrity loss without the administrator's knowledge.

Recommendation

Immediately update SeedDMS to the latest patched version and implement CSRF protection mechanisms such as anti-CSRF tokens.

Original NVD description (English source)

SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditFolder.php.